home

Interop.NETCONLib.dll

Assembly imported from type library 'NETCONLib'.

RadarSync

The file Interop.NETCONLib.dll, re-signed by RadarSync, is an Interop assembly that has been intergated by a 3rd-party into a .Net application, even though the assembly itself is most likely safe, it has been recompiled by a potentially unwanted program.
Publisher:
RadarSync  (signed and verified)

Product:
Assembly imported from type library 'NETCONLib'.

Version:
1.0.0.0

MD5:
cebb054075bc4812ecbe1c46beff7191

SHA-1:
7794d3e0809a323b915aeaffb2b6496811e2e23a

SHA-256:
51e8e426d71c02b053dfd6b04b929fb2013246e35bbf67199cf394e8efda4528

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 8:49:48 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.RadarSync.DriverUpdater.Optional.ResignedInterop.Meta (L)
16.2.5.16

File size:
13.8 KB (14,168 bytes)

Product version:
1.0.0.0

Original file name:
Interop.NETCONLib.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\radarsync\interop.netconlib.dll

Digital Signature
Signed by:
RadarSync

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/20/2010 1:00:00 AM

Valid to:
5/21/2011 12:59:59 AM

Subject:
CN=RadarSync, O=RadarSync, L=Highland Park, S=Illinois, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
382F2F14FD5F1B98676121F145541A

File PE Metadata
Compilation timestamp:
9/1/2010 9:46:07 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:KC2Bcj7EgZ8vL+TGjYsmoTSg4sxT8LcM57FWOeyowJL/ms:KC0cjggZ8vL+TGj2sxoL2YJLms

Entry address:
0x3DDE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 48, 00, 00, 00, 58, 40, 00, 00, 1C, 03, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 1C, 03, 34, 00, 00, 00...
 
[+]

Entropy:
6.0580

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
7.5 KB (7,680 bytes)

Remove Interop.NETCONLib.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.