» megacgxmlexcapiatl.dll
Overview
Analysis
File Details
Behaviors (1)

megacgxmlexcapiatl.dll

CGXMLCAPIATL Module

Mega International Commercial Bank

File name:

Publisher:

Changing Infomation Technology Inc. (signed by Mega International Commercial Bank)

Product:

CGXMLCAPIATL Module

Version:

1, 1, 11, 128

MD5:

40118c3ed4850f294038171e89b65164

SHA-1:

70923403bc5667a980e132eedbb913c86eb74525

SHA-256:

3488674638df3a07e45bd412902d9acea8c15aa48029f52c8ff1339864232128

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

7/12/2025 3:36:06 PM UTC (today)

File size:

3.1 MB (3,220,920 bytes)

Product version:

1, 1, 11, 128

Original file name:

CGXMLCAPIATL.DLL

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Windows\System32\megacgxmlexcapiatl.dll

Digital Signature

Signed by:

Mega International Commercial Bank

Authority:

VeriSign, Inc.

Valid from:

1/11/2010 8:00:00 AM

Valid to:

1/15/2013 7:59:59 AM

Subject:

CN=Mega International Commercial Bank, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mega International Commercial Bank, L=Taipei, S=Taiwan, C=TW

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6C1B2F1E8853DEA8650EE370B745339E

Registration

CLSID:

{BE3A4A57-D084-DEEB-93DC-0187D691463A}

ProgID:

CGXMLCAPIATL.CGXMLATL.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

12/3/2012 2:21:55 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:xnM74pQJ+Kkq5hohreY68/jSkkeTNPDABCNl26rl:1Mp+Kkq5uh6YB/SeYC

Entry address:

0xFAEFC

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, CA, 9C, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 53, 8B, 5C, 24, 08, 56, 57, 8B, F9, C7, 07, 94, 61, 19, 10, 8B, 03, 85, C0, 74, 26, 50, E8, A8, C8, FF, FF, 8B, F0, 46, 56, E8, 64, C2, FF, FF, 85, C0, 59, 59, 89, 47, 04, 74, 12, FF, 33, 56, 50, E8, 13, 9D, 00, 00, 83, C4, 0C, EB, 04, 83, 67, 04, 00, C7, 47, 08, 01, 00, 00, 00, 8B, C7, 5F, 5E, 5B, C2, 04, 00, 8B, C1, 8B, 4C, 24, 04, C7, 00, 94, 61, 19, 10, 8B, 09, 83, 60, 08... 
[+]

Entropy:

6.9911

Code size:

1.4 MB (1,503,232 bytes)

Safe for Initializing Control

CLSID:

{BE3A4A57-D084-DEEB-93DC-0187D691463A}

CLSID name:

MegaCGXMLExCAPIATL

Scan megacgxmlexcapiatl.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.