home

gbiehbmb.dll

Banco Mercantil do Brasil Gbieh

Banco Mercantil do Brasil S.A.

Publisher:
Banco Mercantil do Brasil  (signed by Banco Mercantil do Brasil S.A.)

Product:
Banco Mercantil do Brasil Gbieh

Description:
Gbieh Module

Version:
4,11,0,59

MD5:
682ae963fba8c79653e61ed525e6d7bb

SHA-1:
85ce315ddf7935eb7b5b386229251be1116ec017

SHA-256:
4c7828d63f37dc6b567073328308160b756d92ad0666f7f51795154a3de708b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:00:06 AM UTC  (today)

File size:
1.7 MB (1,775,832 bytes)

Product version:
4,11,0,59

Copyright:
Copyright © 2003-2014, Banco Mercantil do Brasil

Trademarks:
Banco Mercantil do Brasil, Gbieh

Original file name:
Gbieh.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Brazilian Portuguese

Common path:
C:\Program Files\gbplugin\gbiehbmb.dll

Digital Signature
Signed by:
Banco Mercantil do Brasil S.A.

Authority:
Thawte, Inc.

Valid from:
5/19/2013 9:00:00 PM

Valid to:
6/16/2015 8:59:59 PM

Subject:
CN=Banco Mercantil do Brasil S.A., OU=GSI, O=Banco Mercantil do Brasil S.A., L=Belo Horizonte, S=Minas Gerais, C=BR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
423FB0F9F8FB81C73BB357803AD14DA5

File PE Metadata
Compilation timestamp:
11/3/2014 9:37:01 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:+TyUTi2EV/Joj22BHZc92lcgP8z5+P/keY2z:ei2e21jI88eYe

Entry address:
0x4A7D30

Entry point:
60, 60, C7, 44, 24, 3C, 22, 01, 05, 06, E8, 24, 38, F6, FF, 00, 00, 47, 65, 74, 4C, 65, 6E, 67, 74, 68, 53, 69, 64, 00, 56, E9, 5E, 14, 00, 00, F5, 01, C7, F9, E9, 50, 6D, F3, FF, 00, 00, 47, 65, 74, 44, 43, 00, 00, 00, 47, 65, 74, 4D, 6F, 64, 75, 6C, 65, 48, 61, 6E, 64, 6C, 65, 57, 00, 00, 00, 52, 65, 67, 51, 75, 65, 72, 79, 56, 61, 6C, 75, 65, 45, 78, 41, 00, 00, 00, 49, 6E, 74, 65, 72, 6C, 6F, 63, 6B, 65, 64, 49, 6E, 63, 72, 65, 6D, 65, 6E, 74, 00, 8D, 64, 24, 0C, E8, A9, 4B, FD, FF, E8, AB, AA, E5, FF...
 
[+]

Entropy:
7.9309  (probably packed)

Code size:
1.8 MB (1,889,280 bytes)

Approved Shell Extension
Name:
GbPlugin ShlObj

CLSID:
{E37CB5F0-51F5-4395-A808-5FA49E399001}

CLSID name:
GbPluginObj Class


Scan gbiehbmb.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.