home

cnt_ea.dll

Fx1 Inc

Publisher:
Fx1 Inc  (signed and verified)

MD5:
c90fe91898405de32d42a8d25f2f2c24

SHA-1:
e9f2cc57a5948f2ee65b076859096928fa0e7fee

SHA-256:
d5645cf11f4d1353e25568fe412c52f0dc3d47c1c4b6922c92edbb2da1785083

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:52:48 AM UTC  (today)

File size:
5.6 MB (5,822,512 bytes)

File type:
Dynamic link library (Win32 DLL)

Digital Signature
Signed by:
Fx1 Inc

Authority:
COMODO CA Limited

Valid from:
2/8/2012 2:00:00 AM

Valid to:
2/8/2013 1:59:59 AM

Subject:
CN=Fx1 Inc, O=Fx1 Inc, STREET=815 Ponce De Leon Blvd P209, L=Coral Gables, S=Florida / USA, PostalCode=33134, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
60991921FAC023AC6C810B52FEE17A09

File PE Metadata
Compilation timestamp:
2/6/2013 5:46:03 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:+KIQ7L9wuMTfoajUysPB83HIKRWOmxMCHk3dZmTnI7axS1sxST6JPIL9gG3I:xIQ7GuQfo+UVB83XRWDzMfmOl2ogG3

Entry address:
0xB133B1

Entry point:
60, 9C, C7, 44, 24, 20, 1E, C0, 20, D0, E8, DE, 42, A9, FF, 66, F7, D3, 66, D1, DB, 80, F7, 0F, 89, C3, F8, E8, 5A, 2E, 01, 00, 44, AC, 8C, 47, E4, A3, 5C, 24, 81, 54, E0, ED, 1F, A4, EB, B2, 8C, 6B, 73, 00, DA, 6D, 03, ED, A5, C5, 9F, 81, 5D, 68, C4, D5, 9C, DB, AA, E9, 33, 96, B7, 69, 4E, F3, 84, 78, DE, 5B, 8B, 96, 3A, 97, 75, 57, 1B, E7, 58, 31, 51, 9C, 57, FB, 0B, ED, 4A, 9F, D8, 3F, DB, E2, 19, 75, AE, A9, FB, 24, 36, 54, 3F, E6, C1, BF, C7, 1D, E3, 32, F8, 9C, 3B, 5D, 77, 77, 49, 06, 1D, 95, 8B, DF...
 
[+]

Entropy:
7.9980  (probably packed)

Code size:
120.5 KB (123,392 bytes)

The file cnt_ea.dll has been seen being distributed by the following URL.

https://s3.amazonaws.com/.../CNT_EA.dll

Scan cnt_ea.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.