» CommonGUI.dll
Overview
Analysis
File Details
Behaviors (1)

CommonGUI.dll

CommonGUI Debug

General Electric Company

File name:

CommonGUI.dll

Publisher:

Gepc (signed by General Electric Company)

Product:

CommonGUI Debug

Version:

2.00.0020

MD5:

d9abe0ed2767252270b5cb7623ff3bd8

SHA-1:

2a7ec0bff7cc3d306a3b48c3cf8480a0bedba10c

SHA-256:

e966c62efb3f852c4adc2debe56cc4fd358fbc8ab245cfda888acf956c0aa63b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/6/2024 5:16:37 PM UTC (today)

File size:

16.8 MB (17,639,776 bytes)

Product version:

2.00.0020

Original file name:

CommonGUI.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Windows\System32\geci\clusterplus2\commongui.dll

Digital Signature

Signed by:

General Electric Company

Authority:

VeriSign, Inc.

Valid from:

2/24/2014 1:00:00 AM

Valid to:

4/24/2016 1:59:59 AM

Subject:

CN=General Electric Company, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Information Technology, O=General Electric Company, L=Fairfield, S=Connecticut, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

06704329452C16D2A396D8963F91E38D

Registration

CLSIDs:

{0FDB709B-B9E1-4D5D-8CAE-37ADB875A94B}, {92294FA9-F957-4B50-987F-73673B8D28D5}, {994AD650-5E73-4250-A865-3F3F4E02CCD5}, {9AD2B6FA-53A5-4D50-A398-CD19BC334188}, {A45B7049-E08F-4E26-A765-542CB1E642CB}, {ADF0B3BA-E415-452D-9F40-246911411052}

ProgIDs:

CommonGUI.InitFunctions, CommonGUI.Application, CommonGUI.ProductLineChooser

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/3/2016 12:50:43 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

49152:TOnUZjMF1uCTEG/jMfulJ/AFU7X8qIXx5SO9NeQVjxK:T2ijuEG/jMfulJ/AFwX8qIXx5SkK

Entry address:

0x14F08

Entry point:

5A, 68, 00, E2, 09, 12, 68, 04, E2, 09, 12, 52, E9, E7, FF, FF, FF, 00, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 86, F7, BC, 37, 1E, A1, A8, 43, 8C, 50, 96, D7, 83, F0, D7, E3, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 43, 6F, 6D, 6D, 6F, 6E, 47, 55, 49, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B0, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 21, 00, 00, 00, 49, 70, 5B, A4, 8F, E0, 26, 4E, A7, 65, 54, 2C, B1, E6, 42, CB... 
[+]

Developed / compiled with:

Microsoft Visual Basic v6.0

Code size:

16.5 MB (17,330,176 bytes)

Automation Object

CLSID:

{0FDB709B-B9E1-4D5D-8CAE-37ADB875A94B}

CLSID name:

CommonGUI.InitFunctions

Scan CommonGUI.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.