» brgmte.dll
Overview
Analysis
File Details
Behaviors (6)

brgmte.dll

brgmte

Brownstone Research Group Inc.

File name:

brgmte.dll

Publisher:

Brownstone (signed by Brownstone Research Group Inc.)

Product:

brgmte

Version:

1.00.0062

MD5:

b1a4af587a64c682ab11425c006350bb

SHA-1:

05a3c6708eafa35fbe1f75f26627ea825fdf6d5d

SHA-256:

d3e2df63bec4592b83a37eca78add819399134c67d1ca36bf2fa53a589869d64

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 10:12:02 PM UTC (today)

File size:

221 KB (226,328 bytes)

Product version:

1.00.0062

Original file name:

brgmte.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Windows\System32\brgmte.dll

Digital Signature

Signed by:

Brownstone Research Group Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

11/15/2005 9:45:31 AM

Valid to:

12/7/2007 1:12:14 PM

Subject:

CN=Brownstone Research Group Inc., OU=Secure Application Development, O=Brownstone Research Group Inc., L=Rome, S=Georgia, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

4038E8

Registration

CLSIDs:

{260DFA91-0269-4E22-9049-38781C6AC0B8}, {62EFC0CE-9797-4E45-B996-736E361BB360}, {65712C93-3FD5-4E93-B13C-8D4930500FEF}, {CFFA5690-66E4-49AC-B1F1-3CC42E2A3B50}, {D55BA1D7-7FD6-11D7-BC0D-005056402B7A}, {F0B07778-7F86-41A7-9001-58882AC8221A}

ProgIDs:

brgmte.brgExtractMTEF, brgmte.brgUpdateMTEF, brgmte.brgMTEFtoWMF, brgmte.brgGetWebEQSize, brgmte.brgBrowserPlugins, brgmte.brgExtractMTEF2

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/9/2007 11:45:09 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:yrHjaK/d4DzqvnYPbOyy2VgijXnzraoEk8lw1NeAMIF:2phYjnb3zraoEUj

Entry address:

0x33B0

Entry point:

5A, 68, F8, 07, 03, 11, 68, FC, 07, 03, 11, 52, E9, E7, FF, FF, FF, 00, 00, 00, 40, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 27, 63, 9A, BA, 67, 9F, C7, 4F, B9, B7, B6, 15, 45, 73, 40, 14, 00, 00, 00, 00, 00, 00, 01, 00, 05, 00, 00, 00, 00, 00, 00, 00, 62, 72, 67, 6D, 74, 65, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, A8, 00, 00, 00, 88, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 0C, 00, 00, 00, CE, C0, EF, 62, 97, 97, 45, 4E, B9, 96, 73, 6E, 36, 1B, B3, 60, 01, 00, 00, 00, 98, 00, 00, 00... 
[+]

Entropy:

5.7757

Developed / compiled with:

Microsoft Visual Basic v6.0

Code size:

180 KB (184,320 bytes)

6 Automation Objects

CLSID:

{260DFA91-0269-4E22-9049-38781C6AC0B8}

CLSID name:

brgmte.brgExtractMTEF

CLSID:

{62EFC0CE-9797-4E45-B996-736E361BB360}

CLSID name:

brgmte.brgUpdateMTEF

CLSID:

{65712C93-3FD5-4E93-B13C-8D4930500FEF}

CLSID name:

brgmte.brgMTEFtoWMF

CLSID:

{CFFA5690-66E4-49AC-B1F1-3CC42E2A3B50}

CLSID name:

brgmte.brgGetWebEQSize

CLSID:

{D55BA1D7-7FD6-11D7-BC0D-005056402B7A}

CLSID name:

brgmte.brgBrowserPlugins

CLSID:

{F0B07778-7F86-41A7-9001-58882AC8221A}

CLSID name:

brgmte.brgExtractMTEF2

Scan brgmte.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.