home

mqllock_1217_ultimate_trade_indicator_-_ewt_sms_rev11.dll

Fx1 Inc

Publisher:
Fx1 Inc  (signed and verified)

MD5:
78e44067119b783415e9e7ca0f2b789e

SHA-1:
dbc4a7bdf1ae023cc8f4e2a3596726e795e33e36

SHA-256:
f7f7e60d2fda1ee0e5e279818827d1618ec0ac35ce42bbefef7dd369436bbb1f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:13:41 PM UTC  (a few moments ago)

File size:
12.4 MB (13,015,960 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\downloads\mqllock_1217_ultimate_trade_indicator_-_ewt_sms_rev11.dll

Digital Signature
Signed by:
Fx1 Inc

Authority:
COMODO CA Limited

Valid from:
3/7/2013 12:00:00 AM

Valid to:
3/7/2015 11:59:59 PM

Subject:
CN=Fx1 Inc, O=Fx1 Inc, STREET=815 Ponce De Leon Blvd, L=Coral Gables, S=Florida, PostalCode=33134, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009C62CCC4EE70C25CB4640373CED34A76

File PE Metadata
Compilation timestamp:
3/2/2014 9:40:45 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:iN8Th7lIRSiEjZ35umrVGALoWHqjHhF+7dyQ:3lIRSN55cAL1HqqP

Entry address:
0x1994FE3

Entry point:
E8, 72, B0, FF, FF, 94, C6, 92, BD, DB, 7C, 31, DC, 85, FF, F6, 68, 88, AA, DD, 37, F6, C8, 93, 6D, 34, DE, BD, 87, 56, F8, 30, 42, 23, 8F, 3D, D6, 60, 95, 74, CD, 00, A5, 54, ED, 77, AC, B6, 03, 93, 4A, 0A, AC, 4E, F6, D8, 5A, 83, 65, 80, 82, C5, 17, 32, 5C, 33, B5, A8, 32, 90, 52, 1E, 61, AF, 1F, 59, AC, EA, E4, D3, 4D, 8A, 92, 62, E6, D1, DC, C6, 2B, 2C, 86, 6A, 64, A8, A2, 57, AB, FF, 71, 26, EE, 69, 5B, A7, 41, 4D, 47, A5, 3F, 1F, 2E, B8, F8, 3F, 95, BC, 46, 8D, 77, D4, D0, 4A, B0, 22, E3, 0D, 7E, EF...
 
[+]

Entropy:
7.9994  (probably packed)

Code size:
174 KB (178,176 bytes)

The file mqllock_1217_ultimate_trade_indicator_-_ewt_sms_rev11.dll has been seen being distributed by the following URL.

http://www.academyft.com/video/ultimate/.../MQLLock_1217_Ultimate_Trade_Indicator_-_EWT_SMS_rev11.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.