home

mailbell.exe

Markus Schmidt

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Mailbell’.
Publisher:
Markus Schmidt  (signed and verified)

MD5:
372addaf495cdc35ca701b76a20ba5c9

SHA-1:
7f1e236a4f5e6bda182f0288b25e00e0f9835edf

SHA-256:
08f9c1c4dc974cf4542af2667405d13e9e839039c94dab66741b39ff4aec7fee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 3:20:42 AM UTC  (today)

File size:
1.3 MB (1,410,488 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mailbell\mailbell.exe

Digital Signature
Signed by:
Markus Schmidt

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
7/7/2008 2:00:00 AM

Valid to:
8/25/2010 1:59:59 AM

Subject:
CN=Markus Schmidt, OU=SECURE APPLICATION DEVELOPMENT, O=Markus Schmidt, L=Nuernberg, S=Bayern, C=DE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6DA9806F04CEC108C0A2D73642DC4A1F

File PE Metadata
Compilation timestamp:
1/8/2009 3:22:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:NaE3CwgHq2VLBYKBkvHdMiik9Kr5e9VuhkL9p2RCDg0:LCwyq2tWKgWiaOVCkJp2RCDg0

Entry address:
0xBAB7E

Entry point:
E8, AF, E5, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 56, 33, C0, 50, 50, 50, 50, 50, 50, 50, 50, 8B, 55, 0C, 8D, 49, 00, 8A, 02, 0A, C0, 74, 09, 83, C2, 01, 0F, AB, 04, 24, EB, F1, 8B, 75, 08, 8B, FF, 8A, 06, 0A, C0, 74, 0C, 83, C6, 01, 0F, A3, 04, 24, 73, F1, 8D, 46, FF, 83, C4, 20, 5E, C9, C3, 8B, 44, 24, 0C, 53, 85, C0, 74, 52, 8B, 54, 24, 08, 33, DB, 8A, 5C, 24, 0C, F7, C2, 03, 00, 00, 00, 74, 16, 8A, 0A, 83, C2, 01, 32, CB, 74, 72, 83, E8, 01, 74, 32, F7, C2, 03, 00, 00...
 
[+]

Code size:
976 KB (999,424 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Mailbell

Command:
"C:\Program Files\mailbell\mailbell.exe"


The file mailbell.exe has been discovered within the following program.

MailBell  by EmTec Innovative Software
Publisher's description - “MailBell is a mail and anti-spam utility that assists you with your email accounts. The program periodically checks one or multiple email accounts (POP3, IMAP, POP3/IMAP-SSL, MAPI, Gmail) and notifies you when new mail arrives by playing a sound or showing a notification window.”
www.emtec.com/mailbell/index.html?padfile
11% remove it
 
Powered by Should I Remove It?

Scan mailbell.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.