» mail.com_MailCheck.DLL
Overview
Analysis
File Details

mail.com_MailCheck.DLL

mail.com MailCheck for Windows

1&1 Mail & Media Inc.

File name:

Publisher:

1and1 Mail and Media Inc. (signed by 1&1 Mail & Media Inc.)

Product:

mail.com MailCheck for Windows

Version:

2.6.9.0

MD5:

5d811450a0089a8ffd75e6d48387b75c

SHA-1:

7b3b57d0cd32ce275487810347a5553d04575acd

SHA-256:

8485378dbe2e4b1f3e78927e928edc56301b4b25a3120d35c56d1684131dbee8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 3:28:26 AM UTC (today)

File size:

1.2 MB (1,223,536 bytes)

Product version:

2.6.9.0

Original file name:

mail.com_MailCheck.DLL

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\mail.com mailcheck\ie\mail.com_mailcheck.dll

Digital Signature

Signed by:

1&1 Mail & Media Inc.

Authority:

thawte, Inc.

Valid from:

2/28/2016 4:00:00 PM

Valid to:

6/27/2017 4:59:59 PM

Subject:

CN=1&1 Mail & Media Inc., OU=MAIL.com, O=1&1 Mail & Media Inc., L=Chesterbrook, S=Pennsylvania, C=US

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

7F719F98ED28263BB9504153298C4B4C

Registration

CLSIDs:

{8FAF0273-9CA8-4efc-9536-1E35E254D5CD}, {BF42D4A8-016E-4fcd-B1EB-837659FD77C6}, {C424171E-592A-415a-9EB1-DFD6D95D3530}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/20/2016 11:19:04 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

14.0

CTPH (ssdeep):

24576:XGskShaRnvgb0PDlKQdItp6+FIfYTSE50ZC+T:XlbanvgQ7kQmWfYmE50P

Entry address:

0x8A630

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, BF, 05, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 77, FE, FF, FF, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 68, 10, 48, 89, 70, 18, 48, 89, 78, 20, 41, 56, 48, 83, EC, 20, 49, 8B, 59, 38, 48, 8B, F2, 4D, 8B, F0, 48, 8B, E9, 49, 8B, D1, 48, 8B, CE, 49, 8B, F9, 4C, 8D, 43, 04, E8, F0, 00, 00, 00, 8B, 45, 04, 24, 66, F6, D8, B8... 
[+]

Entropy:

6.1574

Code size:

723.5 KB (740,864 bytes)

Scan mail.com_MailCheck.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.