» XX2GR.DLL
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

XX2GR.DLL

GetRight

Headlight Software, Inc.

It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘bho2gr Class’. This is installed with GetRight.

File name:

XX2GR.DLL

Publisher:

Headlight Software, Inc. (signed and verified)

Product:

GetRight

Description:

GetRight's IE Click Monitoring. www.getright.com

Version:

6.3e

MD5:

01852f96277120f4b9d48a8d654e1760

SHA-1:

eec55db72d04e618bdbdc5f8a8f4ce8abf111de4

SHA-256:

fae720e957cf778780697ae5d5782f6a72789e758f1feebecd2f772a89ca57d0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 10:43:11 AM UTC (today)

File size:

336.3 KB (344,336 bytes)

Product version:

6.3e

Original file name:

XX2GR.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\getright\xx2gr.dll

Digital Signature

Signed by:

Headlight Software, Inc.

Authority:

The USERTRUST Network

Valid from:

6/19/2008 2:00:00 AM

Valid to:

6/20/2011 1:59:59 AM

Subject:

CN="Headlight Software, Inc.", O="Headlight Software, Inc.", STREET=2143 N. 64th St., L=Seattle, S=WA, PostalCode=98103, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

434C4E842B6549F65A7B65C1518AB626

Registration

CLSIDs:

{31FF080D-12A3-439A-A2EF-4BA95A3148E8}, {4DA2C32A-4195-11D1-A9E1-00403320FCF2}, {73BA8F12-723E-11D1-A9E2-00403320FCF2}, {77BA8F12-723E-11D1-A9E2-00403320FCF2}

ProgIDs:

Msie2gr.bho2gr.1, GetRight.Automation, Ie2GetRight.Ie2GetRight.1, GRDownloadManager.GRDownloadManager.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

6/23/2008 10:05:41 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:/592nf50+rxKa4V6Cu5Ie31jYVGPJu8jwq6yjPuQM8:h92xVxB5PGAsq3W8

Entry address:

0x21F13

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 8C, 83, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, C4, A2, 03, 10, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 85, C0, 5F, 89, 45, FC, 5E, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 84, 61, 03, 10, C9, C2, 08, 00, 6A, 00, FF, 74, 24, 14, FF, 74, 24, 14, FF, 74, 24, 14, FF, 74, 24, 14, E8, AA, 83... 
[+]

Code size:

212 KB (217,088 bytes)

Internet Explorer BHO

CLSID:

{31FF080D-12A3-439A-A2EF-4BA95A3148E8}

CLSID name:

bho2gr Class

The file XX2GR.DLL has been discovered within the following program.

GetRight by Headlight Software, Inc.

GetRight is a shareware download manager.

www.GetRight.com

3% remove it

Scan XX2GR.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.