home

interop.script_creator.dll

Assembly imported from type library 'SCRIPT_CREATORLib'.

Hewlett-Packard Company

The file interop.script_creator.dll, re-signed by Hewlett-Packard Company, is an Interop assembly that has been intergated by a 3rd-party into a .Net application. The file has been seen being downloaded from aopcpqc01.opc.ual.com.
Publisher:
Hewlett-Packard Company  (signed and verified)

Product:
Assembly imported from type library 'SCRIPT_CREATORLib'.

Version:
11.0.0.404

MD5:
c12323f9b579151b55f1eb240a422e6b

SHA-1:
52e82efa9ec35622da19ffcaade5e239dbaf18a6

SHA-256:
828d257f0469c23075e18343d8cdcd42ce515667f17ee8ac80b17f0f668900bb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/10/2025 4:20:29 PM UTC  (today)

File size:
12.6 KB (12,936 bytes)

Product version:
11.0.0.404

Original file name:
interop.script_creator.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\hp\alm-client\aopcpqc01\interop.script_creator.dll

Digital Signature
Signed by:
Hewlett-Packard Company

Authority:
VeriSign, Inc.

Valid from:
6/25/2014 5:30:00 AM

Valid to:
7/25/2016 5:29:59 AM

Subject:
CN=Hewlett-Packard Company, O=Hewlett-Packard Company, L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
56A30E9A6EAB4489884F10D9BEF2DF24

File PE Metadata
Compilation timestamp:
3/6/2011 5:23:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:l+6BEU9YvckYRZvhLStenYe+PjPFrtb9cOK+BjtlAur9ZCspE+TMQrd/J8:l+AEawtYbhLSEnYPLXzUHeMQ8

Entry address:
0x2B9E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6289

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3 KB (3,072 bytes)

The file interop.script_creator.dll has been seen being distributed by the following URL.

http://aopcpqc01.opc.ual.com:8080/qcbin/Install/Extensions/.../interop.script_creator.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.