_isdel.exe
- File Path:
C:\Windows\SysWOW64\InstallShield\_isdel.exe
- Description: 32-bit InstallShield Deleter.
Hashes
| Type |
Hash |
| MD5 |
9D4EC4B71FD189A0B2C4DBD6AADE16BF |
| SHA1 |
0E7BB331D398BE694A92A823DE839FEFDF464DFD |
| SHA256 |
1E97ECA81395D1BD5E627DEBFDB02828BD3655D68C8F7296395D574781FAA32E |
| SHA384 |
4E7F088DD7D385E61DE22303A324671509767A5A11817922CC3FF9F3D032305746FA034861C575345578DBAF10BFF362 |
| SHA512 |
765F8A531CC44FB241C577938C936506450D579F2005E32092B443423749F25F09C498B8A70179D37423082E8939EF4DB0B9AA82C10936922600EF2A2C936F65 |
| SSDEEP |
384:m3wIA7GjPE6nnP9TDWsKAkk/fG8+lmQP+0JSfgyz:QwIA7Q7tDUAdnemQVSfg |
| IMP |
AF417A432744D25669A269C31C292485 |
| PESHA1 |
FB5C09800C25B6498A54C4F0C638282CB01376E5 |
| PE256 |
499342A59AAFF1C1AC5F1BA1E0967C1EA21963505BAA43C841C16B02F5F3A186 |
Runtime Data
Open Handles:
| Path |
Type |
| (R–) C:\Windows\SysWOW64\InstallShield_isdel.exe |
File |
| (RW-) C:\Users\user |
File |
| (RW-) C:\Windows |
File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17763.1518_none_b4b635d36e735c2c |
File |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000004.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro |
Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
| \Sessions\2\Windows\Theme2131664586 |
Section |
| \Windows\Theme966197582 |
Section |
Loaded Modules:
| Path |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
| C:\Windows\SysWOW64\InstallShield_isdel.exe |
Signature
- Status: Signature verified.
- Serial:
33000001C422B2F79B793DACB20000000001C4
- Thumbprint:
AE9C1AE54763822EEC42474983D8B635116C8452
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename:
- Product Name: InstallShield
- Company Name: InstallShield Software Corporation
- File Version: 5, 51, 138, 0
- Product Version: 5, 51
- Language: English (United States)
- Legal Copyright: Copyright 1990-1998 InstallShield Software Corporation, Phone: (847) 240-9111
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/1e97eca81395d1bd5e627debfdb02828bd3655d68c8f7296395d574781faa32e/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.