home

certbgi.dll

MD5:
91c43ed59323db92c3b5bd00106a6693

SHA-1:
0f4474e98d325c998561f9c1a67994c0a6a52293

SHA-256:
9f14664bd211dec4ee09fb9939d6cdc13e36c89852463285dd9773cf46bab047

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 6:11:25 AM UTC  (today)

File size:
240 KB (245,792 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\certbgi.dll

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:Nr3h12rX+RHhwEhQkn9ZX+O3Pg0C2NelnSKCUS80+:9hUL8G8Rn9Rlo2NeiUS8z

Entry point:
59, 78, B4, 20, 1D, B1, E0, CA, 6A, 94, 87, 35, 98, 13, E4, 72, 86, 9D, 65, 35, 7C, B9, B8, 96, 76, 6F, B6, CE, 1E, 91, 21, E7, 6B, 14, F1, 8D, 2F, CA, 53, 60, E0, 05, 24, 92, FA, 18, D7, AC, AD, 9D, 7A, 29, F1, 43, 28, 38, 02, BE, 32, 8A, B4, 34, F4, 66, 5A, 33, 4C, 15, 86, 11, 0C, 53, C0, 7C, F7, 65, EF, 15, 9D, 3E, 93, 8D, 6B, 76, 44, 4B, D0, AB, AA, A4, 3D, 61, 54, 8A, 8F, 56, A7, 3D, 0E, A9, 07, 22, 55, 51, 5D, 40, 8D, AB, 2D, EC, 2B, 3C, 54, 26, 01, 9A, 57, 82, FF, F7, 02, 96, EF, 07, 83, E2, F6, FD...
 
[+]

Entropy:
7.9992  (probably packed)

The file certbgi.dll has been seen being distributed by the following 4 URLs.

https://form.shinhan.com/Rexpert/plugin/bcqre/.../Certbgi.dll

http://rdext.kosaf.go.kr/DataServer/.../Certbgi.dll

http://cert.ust.ac.kr/RexServer30/plugin/bcqre/.../Certbgi.dll

http://www.4insure.or.kr/RexServer30/plugin/bcqre/.../Certbgi.dll

Scan certbgi.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.