home

gbiehbmb.dll

Banco Mercantil do Brasil Gbieh

Banco Mercantil do Brasil S.A.

Publisher:
Banco Mercantil do Brasil  (signed by Banco Mercantil do Brasil S.A.)

Product:
Banco Mercantil do Brasil Gbieh

Description:
Gbieh Module

Version:
4,7,0,13

MD5:
41a957aff7ca1b8d82de894db09569d0

SHA-1:
d0195f6b0e77b18cad29cb1559a71d4d50fcc2af

SHA-256:
0478277290e02f2cb42d7119788c9d67503d9a40e5cf8e75290b9e00b8f388c3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:31:45 PM UTC  (today)

File size:
1.5 MB (1,553,624 bytes)

Product version:
4,7,0,13

Copyright:
Copyright © 2003-2014, Banco Mercantil do Brasil

Trademarks:
Banco Mercantil do Brasil, Gbieh

Original file name:
Gbieh.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Brazilian Portuguese

Common path:
C:\Program Files\gbplugin\gbiehbmb.dll

Digital Signature
Signed by:
Banco Mercantil do Brasil S.A.

Authority:
Thawte, Inc.

Valid from:
5/19/2013 9:00:00 PM

Valid to:
6/16/2015 8:59:59 PM

Subject:
CN=Banco Mercantil do Brasil S.A., OU=GSI, O=Banco Mercantil do Brasil S.A., L=Belo Horizonte, S=Minas Gerais, C=BR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
423FB0F9F8FB81C73BB357803AD14DA5

Registration
CLSIDs:
{98C11555-BC81-40aa-A053-DAADC5630001}, {C41A1C0E-EA6C-11D4-B1B8-444553540001}, {E37CB5F0-51F5-4395-A808-5FA49E399001}

ProgIDs:
GbiehBmb.GbExplorerPersistObj.1, GbiehBmb.GbIehObj.1, GbiehBmb.GbPluginObj.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
5/12/2014 6:50:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:+eEHyhJoFRyahW/IXaqaJjaNYinA6VabCyhqwvc4nUyBHwNT12Z/kciHHN:+NyPWySlaqRTykMc4nUyxCTZ

Entry address:
0x42BF01

Entry point:
E9, 5B, 35, F3, FF, 89, 44, 24, 30, C6, 44, 24, 04, DF, 66, C7, 44, 24, 0C, 16, 3B, FF, 74, 24, 30, C2, 34, 00, 00, 00, 47, 65, 74, 44, 61, 74, 65, 46, 6F, 72, 6D, 61, 74, 41, 00, 8D, 64, 24, 2C, E8, F9, A9, F2, FF, E8, 83, 06, 00, 00, E9, 06, 44, F3, FF, 00, 00, 6C, 73, 74, 72, 63, 6D, 70, 69, 41, 00, 00, 00, 00, 00, 60, 21, 10, 01, 60, 21, 10, 30, 47, 20, 10, 68, BF, 42, 10, 00, 00, 00, 00, 00, 00, 00, 00, 29, 10, 36, 10, 40, 27, 13, 10, 00, 00, 00, 00, 54, 8D, 64, 24, 4C, 0F, 83, DF, 4E, F3, FF, 50, 8D...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
1.5 MB (1,606,144 bytes)

Approved Shell Extension
Name:
GbPlugin ShlObj

CLSID:
{E37CB5F0-51F5-4395-A808-5FA49E399001}

CLSID name:
GbPluginObj Class


Scan gbiehbmb.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.