» mail.com_MailCheck.DLL
Overview
Analysis
File Details

mail.com_MailCheck.DLL

mail.com MailCheck for Windows

1&1 Mail & Media Inc.

File name:

Publisher:

1and1 Mail and Media Inc. (signed by 1&1 Mail & Media Inc.)

Product:

mail.com MailCheck for Windows

Version:

2.6.8.0

MD5:

de5154231c923f06850bd5939f56acfa

SHA-1:

af650dc3d784223497b4caefcf17206e3ac45552

SHA-256:

2599275523f12e355208f6c81e24005aeab329e5ecc6a9a5fc34283856487be6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 3:45:13 AM UTC (today)

File size:

1.1 MB (1,121,144 bytes)

Product version:

2.6.8.0

Original file name:

mail.com_MailCheck.DLL

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\mail.com mailcheck\ie\mail.com_mailcheck.dll

Digital Signature

Signed by:

1&1 Mail & Media Inc.

Authority:

thawte, Inc.

Valid from:

2/29/2016 12:00:00 AM

Valid to:

6/28/2017 12:59:59 AM

Subject:

CN=1&1 Mail & Media Inc., OU=MAIL.com, O=1&1 Mail & Media Inc., L=Chesterbrook, S=Pennsylvania, C=US

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

7F719F98ED28263BB9504153298C4B4C

Registration

CLSIDs:

{8FAF0273-9CA8-4efc-9536-1E35E254D5CD}, {BF42D4A8-016E-4fcd-B1EB-837659FD77C6}, {C424171E-592A-415a-9EB1-DFD6D95D3530}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

5/19/2016 3:05:14 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:ccIScSVvoGnB5yQc8xacrH3BdLOl7gwWjUDUEs8125m:cnScpGnB5yQNxBH5812

Entry address:

0x6EA70

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 43, A1, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 68, 10, 48, 89, 70, 18, 48, 89, 78, 20, 41, 54, 48, 83, EC, 20, 4D, 8B, 51, 38, 48, 8B, F2, 4D, 8B, E0, 41, 8B, 02, 48, 8B, E9, 49, 8B, D1, 48, 03, C0, 48, 8B, CE, 49, 8B, F9, 49, 8D, 5C, C2, 04, 4C, 8B, C3, E8, 46, 0B... 
[+]

Entropy:

6.1192

Code size:

684.5 KB (700,928 bytes)

Scan mail.com_MailCheck.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.