home

microsoft.visualstudio.ole.interop.dll

Microsoft Visual Studio .NET

Yuna Software Limited

This common language runtime assembly is typically installed in the GAC (Global Assembly Cache). While the file properties state the file is developed by 'Microsoft Corporation', this is not the case and it is designed just to look like a legitimate Microsoft system file. The module microsoft.visualstudio.ole.interop.dll by Yuna Software Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Microsoft Corporation  (signed by Yuna Software Limited)

Product:
Microsoft® Visual Studio .NET

Version:
7.10.6070

MD5:
e597a2421d745f304b15091adbdcefb1

SHA-1:
0936bbe05f0583b36a8eaa6de8fcf88988e7eff7

SHA-256:
a2b966267e779bd4c39b7eb722f136dd20abc3511fb1eafcafdcc4aac2705f93

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
While the .Net Interopt file itself is not dangerous, it is part of a program that has been detected as potentially unwanted.

Analysis date:
11/27/2024 1:20:08 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
17.2.28.14

File size:
121.3 KB (124,232 bytes)

Product version:
7.10.6070

Copyright:
Copyright© Microsoft Corporation. All rights reserved.

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\windows\assembly\gac\microsoft.visualstudio.ole.interop\7.1.40304.0__b03f5f7f11d50a3a\microsoft.visualstudio.ole.interop.dll

Digital Signature
Signed by:
Yuna Software Limited

Authority:
VeriSign, Inc.

Valid from:
10/20/2009 3:00:00 AM

Valid to:
10/20/2012 2:59:59 AM

Subject:
CN=Yuna Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Yuna Software Limited, L=St. Helier, S=Jersey, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6DF4318F9EA4EEB8E01F4B0B02CDF983

File PE Metadata
Compilation timestamp:
11/25/2009 11:33:19 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

.NET CLR dependent:
Yes

Entry address:
0x1B8CE

Entry point:
FF, 25, 00, 20, 3E, 49, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0913

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
104 KB (106,496 bytes)

Remove microsoft.visualstudio.ole.interop.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.