The ISSetup dll (InstallShield (R) Setup Engine) Macrovision Corporation File Malware Analysis
Gridinsoft Logo
File Icon

The ISSetup.dll (InstallShield (R) Setup Engine) File Analysis

Technical Analysis

File Name ISSetup.dll
File Type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed
Scanner Version 1.0.224.174
Database Version 2025-09-16 08:01:00 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
4,542,569
File Size (bytes)
2025-09-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
89c35e76698658bc066b2732d347e91b
SHA1
0b2d07a51975b7004bb704f883df84a8892cc3d3
SHA256
55cf7ea62e353b200dbbf06b9b19d157c49cf4ebeb804bb89e2af603007a72a0
SHA512
bfdbb019fe6f26ff58f122689026bb4677f3ce8c8e88d07b5fdbc350d45cd2736fa4e858e4e2d20c66a807022a684d737673d29a209c7c5d61919e14e724b289
ImpHash
e0cfca02244db6ecf9d99f87545b62ee

PE Analysis

Basic Information

Icon
Hash: 1a3f93a0850f04ff643ec94ca28b5815
Fuzzy: e05d2d93e04e36d50b80322644f56355
dHash: 544939338cb9838d
Image Base 0x10000000
Entry Point 0x10170f50
Compilation Time 2007-02-28 22:01:52
Checksum 0x00000000 (Actual: 0x0045abb8)
OS Version 4.0
PEiD Signatures PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed
Digital Signature No valid SignedData structure was found.
Imports 12 libraries
Exports 1006 functions
Resources 16 Resources
Sections 3 Sections

Version Information

CompanyName Macrovision Corporation
FileDescription InstallShield (R) Setup Engine
FileVersion 12.0.58851
InternalName Kernel
OriginalFilename iKernel.dll
LegalCopyright Copyright (C) 2006 Macrovision Corporation
ProductName InstallShield
ProductVersion 12.0
OLESelfRegister
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 1,150,976 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x0011a000 360,448 bytes 356,864 bytes 7.90 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6F12885030912391026A26F445025A76
.rsrc 0x00172000 147,456 bytes 146,432 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 541C054652DFE5416309DCF2D65B7DC1
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

Total Resources: 16 (131,568 bytes)
Resource Type Count Total Size Percentage
PUBLICKEY 1 148 bytes
0.1%
TYPELIB 1 103,596 bytes
78.7%
RT_ICON 9 25,064 bytes
19.1%
RT_DIALOG 1 812 bytes
0.6%
RT_STRING 2 972 bytes
0.7%
RT_GROUP_ICON 1 132 bytes
0.1%
RT_VERSION 1 844 bytes
0.6%

Certificate Chain Analysis

Certificate Information
Product InstallShield
Description InstallShield (R) Setup Engine
File Version 12.0.58851
Original Name iKernel.dll
Internal Name Kernel
Copyright Copyright (C) 2006 Macrovision Corporation

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware