home

cbhook-x64.dll

Bomgar Button

Bomgar Corporation

Publisher:
Bomgar  (signed by Bomgar Corporation)

Product:
Bomgar Button

Version:
15.1.5 (59205)

MD5:
f53f64b6f3537aca150a848e0e7b33ef

SHA-1:
f2bd48c7ab1ac115438f4df0b103ed1c3c382c54

SHA-256:
c5d7ec954fcecf5811c0e40fa47e2be841bd4621e866216e3e0d6fcb2f84b84c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 3:17:58 AM UTC  (today)

File size:
42.9 KB (43,888 bytes)

Product version:
15.1.5 (59205)

Copyright:
Copyright © 2002-2015 Bomgar Corporation. Redistribution Prohibited. All Rights Reserved.

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\cbhook-x64.dll

Digital Signature
Signed by:
Bomgar Corporation

Authority:
VeriSign, Inc.

Valid from:
1/30/2013 8:00:00 AM

Valid to:
5/1/2016 7:59:59 AM

Subject:
CN=Bomgar Corporation, OU=Remote Support, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Bomgar Corporation, L=Ridgeland, S=Mississippi, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7DB104BF89329FD8B9E2C36F80FC388C

File PE Metadata
Compilation timestamp:
10/29/2015 5:15:45 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x3AA0

Entry point:
40, 53, 48, 83, EC, 20, 48, 8B, D9, 85, D2, 74, 62, 83, FA, 01, 0F, 85, B1, 00, 00, 00, FF, 15, A4, 16, 00, 00, 48, 89, 1D, 95, 35, 00, 00, FF, 15, 47, 16, 00, 00, E8, F2, E1, FF, FF, 48, 89, 05, 8B, 35, 00, 00, E8, 06, EA, FF, FF, 84, C0, 75, 12, C6, 05, 5D, 35, 00, 00, 01, B8, 01, 00, 00, 00, 48, 83, C4, 20, 5B, C3, E8, 7B, FE, FF, FF, 48, 8D, 0D, 64, E1, FF, FF, 33, D2, FF, 15, EC, 16, 00, 00, B8, 01, 00, 00, 00, 48, 83, C4, 20, 5B, C3, E8, DC, E2, FF, FF, 48, 8B, 0D, 1D, 35, 00, 00, 33, DB, 48, 89, 1D...
 
[+]

Entropy:
6.2642

Code size:
15.5 KB (15,872 bytes)

Scan cbhook-x64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.