home

mailbell.exe

Markus Schmidt

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Mailbell’.
Publisher:
Markus Schmidt  (signed and verified)

MD5:
c169972f7d8c9c136c3da9bd462e5e51

SHA-1:
71690a3554e0ea5082c80f53262f00c40c71f657

SHA-256:
0083b0663f891f401bcb331f8283fbc8de93aab89ae19174f868f867ad9cd500

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/26/2025 4:20:08 PM UTC  (today)

File size:
1.3 MB (1,402,296 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mailbell\mailbell.exe

Digital Signature
Signed by:
Markus Schmidt

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
7/7/2008 2:00:00 AM

Valid to:
8/25/2010 1:59:59 AM

Subject:
CN=Markus Schmidt, OU=SECURE APPLICATION DEVELOPMENT, O=Markus Schmidt, L=Nuernberg, S=Bayern, C=DE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6DA9806F04CEC108C0A2D73642DC4A1F

File PE Metadata
Compilation timestamp:
8/14/2008 12:14:02 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:wALnsJgUFrAjtF+QzCze3G/T+AP27/DH9syN3ZYb34wHBLpFObI4v:w+sJg0rAD+c4T+AP27/hsy4U8BLpFObf

Entry address:
0xB8D3E

Entry point:
E8, 3F, E8, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 56, 33, C0, 50, 50, 50, 50, 50, 50, 50, 50, 8B, 55, 0C, 8D, 49, 00, 8A, 02, 0A, C0, 74, 09, 83, C2, 01, 0F, AB, 04, 24, EB, F1, 8B, 75, 08, 8B, FF, 8A, 06, 0A, C0, 74, 0C, 83, C6, 01, 0F, A3, 04, 24, 73, F1, 8D, 46, FF, 83, C4, 20, 5E, C9, C3, 8B, 44, 24, 0C, 53, 85, C0, 74, 52, 8B, 54, 24, 08, 33, DB, 8A, 5C, 24, 0C, F7, C2, 03, 00, 00, 00, 74, 16, 8A, 0A, 83, C2, 01, 32, CB, 74, 72, 83, E8, 01, 74, 32, F7, C2, 03, 00, 00...
 
[+]

Code size:
968 KB (991,232 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Mailbell

Command:
"C:\Program Files\mailbell\mailbell.exe"


The file mailbell.exe has been discovered within the following program.

MailBell  by EmTec Innovative Software
Publisher's description - “MailBell is a mail and anti-spam utility that assists you with your email accounts. The program periodically checks one or multiple email accounts (POP3, IMAP, POP3/IMAP-SSL, MAPI, Gmail) and notifies you when new mail arrives by playing a sound or showing a notification window.”
www.emtec.com/mailbell/index.html?padfile
11% remove it
 
Powered by Should I Remove It?

Scan mailbell.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.