home

ESUNCGCryptoATL.DLL

ESUNCGCryptoATL Module

E.Sun Commercial Bank, Ltd.

Publisher:
Changing Infomation Technology Inc.  (signed by E.Sun Commercial Bank, Ltd.)

Product:
ESUNCGCryptoATL Module

Version:
1, 1, 12, 426

MD5:
1f02f37e21fb18be8991d3e845e1694b

SHA-1:
fa4f201b4d29fd39740dce6a5b27504242ef333d

SHA-256:
a4ee51de2a1b5ed682b3b1f30a5fd823e0ad134f0b52291d9fda7ca413097a3c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 9:54:53 PM UTC  (today)

File size:
3 MB (3,139,216 bytes)

Product version:
1, 1, 12, 426

Copyright:
Copyright (c) 2012 Changing Infomation Technology Inc. All rights reserved.

Original file name:
ESUNCGCryptoATL.DLL

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\windows\syswow64\esuncgcryptoatl.dll

Digital Signature
Signed by:
E.Sun Commercial Bank, Ltd.

Authority:
GlobalSign nv-sa

Valid from:
7/8/2011 5:06:25 PM

Valid to:
7/8/2014 5:06:25 PM

Subject:
CN="E.Sun Commercial Bank, Ltd.", OU="E.Sun Commercial Bank, Ltd.", O="E.Sun Commercial Bank, Ltd.", L=Taipei, S=Taiwan, C=TW

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112115B5EBEEA806FBB06473BB0A1548EFD8

File PE Metadata
Compilation timestamp:
4/26/2013 1:38:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:WzCs2zjMb3U0fjEC014o3gekNPDABCNlKeOGiPB:WebzA40fYCPeeOG6

Entry address:
0x14B191

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 49, 06, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, CD, FE, FF, FF, 59, C2, 0C, 00, FF, 25, 70, 03, 15, 10, FF, 25, 74, 03, 15, 10, CC, CC, FF, 25, 78, 03, 15, 10, FF, 25, 7C, 03, 15, 10, FF, 25, 80, 03, 15, 10, FF, 25, 84, 03, 15, 10, FF, 25, 88, 03, 15, 10, FF, 25, 8C, 03, 15, 10, FF, 25, 90, 03, 15, 10, FF, 25, 94, 03, 15, 10, FF, 25, 98, 03, 15, 10, FF, 25, 9C, 03, 15, 10, FF, 25, A0, 03, 15, 10, FF, 25, A4, 03, 15, 10, FF, 25, A8, 03, 15, 10, FF, 25, AC...
 
[+]

Entropy:
7.0066

Code size:
1.3 MB (1,372,160 bytes)

Scan ESUNCGCryptoATL.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.