home

bglmanx.dll

bglmanx Dynamic Link Library

VIRTUALI Sagl

Publisher:
VIRTUALI Sagl  (signed and verified)

Product:
bglmanx Dynamic Link Library

Version:
3, 0, 0, 17

MD5:
51d92a1ed112b50f191297e2b7c00b90

SHA-1:
03b10045f5125feceefb854e1c08bcf608a7fa89

SHA-256:
426cc1624abf725fce4919004472908a5df73de4c7329df7c16dc92276176162

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 7:19:00 PM UTC  (today)

File size:
1.7 MB (1,818,384 bytes)

Product version:
3, 0, 0, 17

Copyright:
Copyright (C) 2006, 2015 VIRTUALI Sagl

Original file name:
bglmanx.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Italian (Italy)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\bglmanx.dll

Digital Signature
Signed by:
VIRTUALI Sagl

Authority:
COMODO CA Limited

Valid from:
3/19/2016 7:00:00 PM

Valid to:
11/15/2016 5:59:59 PM

Subject:
CN=VIRTUALI Sagl, OU=VIRTUALI Sagl, O=VIRTUALI Sagl, STREET=Via al Pero 28f, L=Genestrerio, S=Genestrerio, PostalCode=6852, C=CH

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00BEAA606EEC2BB1EC3AF0033F4DF7C383

File PE Metadata
Compilation timestamp:
11/7/2016 6:32:38 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:NIwzb8OTjMNCVkwzZO6QgqISQXW5OWhti+P/rfUn:NIKtj+HKZqISQ0OWXDg

Entry address:
0x7D6D00

Entry point:
EB, 08, 00, F8, 01, 00, 00, 00, 00, 00, 60, E8, 00, 00, 00, 00, 5D, 81, ED, 10, 00, 00, 00, 81, ED, 00, 6D, 7D, 00, 8A, 84, 24, 28, 00, 00, 00, 80, F8, 01, 0F, 84, 07, 00, 00, 00, 61, 33, C0, 40, C2, 0C, 00, E9, 04, 00, 00, 00, 1F, BF, BC, 79, B8, 00, 6D, 7D, 00, 03, C5, 81, C0, 63, 00, 00, 00, B9, 73, 05, 00, 00, BA, 25, 2E, F4, 50, 30, 10, 40, 49, 0F, 85, F6, FF, FF, FF, E9, 04, 00, 00, 00, 85, 1E, 19, 89, AE, E8, AE, AC, 19, 25, 25, 25, A4, E4, DD, 25, 25, 25, 26, E8, 9D, 23, 25, 25, 25, 9F, 0D, 25, 25...
 
[+]

Entropy:
7.9840  (probably packed)

Code size:
201.5 KB (206,336 bytes)

Scan bglmanx.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.