» Kernel MAPI Engine.exe
Overview
Analysis
File Details

Kernel MAPI Engine.exe

Kernel MAPI Engine

Lepide Software Pvt. Ltd.

File name:

Publisher:

Lepide Software Pvt. Ltd. (signed and verified)

Product:

Kernel MAPI Engine

Version:

12, 1, 1, 0

MD5:

7ea409a8138a05d0861a4d1e94ff3d50

SHA-1:

dd8b7ab3df87a9b505a18d3f98954a401f3d2f8e

SHA-256:

1a4bf19990ceffb7b9e18bb17b1f7b0c6569419d0c39cd741d3300470f3d753b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 4:24:49 AM UTC (today)

File size:

1.2 MB (1,212,040 bytes)

Product version:

12, 1, 1, 0

Original file name:

Kernel MAPI Engine.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\kernel for exchange to lotus notes evaluation ver\kernel mapi engine.exe

Digital Signature

Signed by:

Lepide Software Pvt. Ltd.

Authority:

GlobalSign nv-sa

Valid from:

4/6/2011 4:16:43 PM

Valid to:

3/22/2012 8:17:30 PM

Subject:

CN=Lepide Software Pvt. Ltd., O=Lepide Software Pvt. Ltd., C=IN

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012F2A992CB8

File PE Metadata

Compilation timestamp:

2/3/2012 4:00:42 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:RZJSX6H6/mRmY6qGCPjNQPN+B2Y/NIIlcEbvxatgv0z7EvgbwgiN64mTBA:RH9a/mRQUWF0NIICIvxOwghlA

Entry address:

0x5B6E4

Entry point:

48, 83, EC, 28, E8, D3, 62, 00, 00, 48, 83, C4, 28, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 41, 05, 09, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, 45, 63, 00, 00, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8D, 05, E7, D6, 02, 00, 8B, DA, 48, 8B, F9, 48, 89, 01, E8, 72, 64, 00, 00, F6, C3, 01, 74, 08, 48, 8B, CF, E8, 59, 8B, FD, FF, 48, 8B, C7, 48, 8B, 5C, 24, 30, 48... 
[+]

Entropy:

5.6040

Code size:

509.5 KB (521,728 bytes)

Scan Kernel MAPI Engine.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.