ehssetup.dll
By Microsoft
| Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| MD5: | ccdc8886046d9a7298b465b63dfabba3 |
| SHA1: | eeb91d2791809d90c35d827ba42a35be20800b7d |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
ehssetup.dll is loaded as dynamic link library that runs in the context of a process. This will ad a run once registry key upon installation for all user profiles of the PC that will cause the file to be executed the first time any user logs in. This version is designed to run on Windows 7.
Details
| File name: | ehssetup.dll |
| Publisher: | Microsoft Corporation |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\windows\ehome\ehssetup.dll |
| File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| Product version: | 6.1.7600.16385 |
| Size: | 16 KB (16,384 bytes) |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Startup files (all users) run once
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
- 'ehssetup' → "C:\Windows\system32\rundll32.exe" "C:\Windows\ehome\ehssetup.dll",LaunchProcessInputFiles
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
100.00% |
|
