home

Interop.IWshRuntimeLibrary.dll

Assembly importato dalla libreria dei tipi 'IWshRuntimeLibrary'.

Boost Software Inc

Interop.IWshRuntimeLibrary.dll is the library is an interop assembly of the IWshRuntimeLibrary and is recompiled by Boost Software Inc. The file Interop.IWshRuntimeLibrary.dll, re-signed by Boost Software Inc, is an Interop assembly that has been intergated by a 3rd-party into a .Net application, even though the assembly itself is most likely safe, it has been recompiled by a potentially unwanted program. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.
Publisher:
Boost Software Inc  (signed and verified)

Product:
Assembly importato dalla libreria dei tipi 'IWshRuntimeLibrary'.

Version:
1.0.0.0

MD5:
8d02031e3e3fb5742a600890392e921a

SHA-1:
76cc20001653e2ee5eb07f403969c9c4fb2c01c5

SHA-256:
cb911e7b591f078e78b7532c95208f50c71f56e508d77e23e0973f963e526ea4

Scanner detections:
1 / 68

Status:
Inconclusive but possibly unwanted  (It is part of a common redistributable library)

Analysis date:
4/18/2024 12:43:38 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Common.PartOf.PUP.Optional.BoostSoftware
16.2.4.3

File size:
53.9 KB (55,224 bytes)

Product version:
1.0.0.0

Original file name:
Interop.IWshRuntimeLibrary.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\pc healthboost\interop.iwshruntimelibrary.dll

Digital Signature
Signed by:
Boost Software Inc

Authority:
VeriSign, Inc.

Valid from:
3/21/2012 5:00:00 PM

Valid to:
3/22/2013 4:59:59 PM

Subject:
CN=Boost Software Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Boost Software Inc, L=Boston, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7F6864EF9E0BF8DE63BCE3FFF21CA176

File PE Metadata
Compilation timestamp:
12/6/2012 10:36:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:fx3LY+sPhWVJPsedLVDUYlkXrSXVteUdzttJ2z9IkCBNQtcNgIIILaLl:BL9nVJEetVDUxSpvJ2z9IDN3gQC

Entry address:
0xA83E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.0138

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
36 KB (36,864 bytes)

Scan Interop.IWshRuntimeLibrary.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.