home

mailbell.exe

Markus Schmidt

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Mailbell’.
Publisher:
Markus Schmidt  (signed and verified)

MD5:
c11683be58661c79f5856e0bfe03f0a2

SHA-1:
f45ebbefc61e95f7c774b527754853cbac765a18

SHA-256:
ea4851959a2bf278cdb0f56513cd87967b7ed50dbbbf64b0c9cfb91a609f083e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 9:07:17 PM UTC  (today)

File size:
1.3 MB (1,385,912 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mailbell\mailbell.exe

Digital Signature
Signed by:
Markus Schmidt

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
7/7/2008 2:00:00 AM

Valid to:
8/25/2010 1:59:59 AM

Subject:
CN=Markus Schmidt, OU=SECURE APPLICATION DEVELOPMENT, O=Markus Schmidt, L=Nuernberg, S=Bayern, C=DE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6DA9806F04CEC108C0A2D73642DC4A1F

File PE Metadata
Compilation timestamp:
5/19/2010 3:41:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:A0WhCfGPrxreq/RQy7Sn5M/Kgbdd/l/r2sw2Epr7Hln:T7fINT/mfSKgb1CswjpvHln

Entry address:
0xB5CFE

Entry point:
E8, 2F, EB, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 56, 33, C0, 50, 50, 50, 50, 50, 50, 50, 50, 8B, 55, 0C, 8D, 49, 00, 8A, 02, 0A, C0, 74, 09, 83, C2, 01, 0F, AB, 04, 24, EB, F1, 8B, 75, 08, 8B, FF, 8A, 06, 0A, C0, 74, 0C, 83, C6, 01, 0F, A3, 04, 24, 73, F1, 8D, 46, FF, 83, C4, 20, 5E, C9, C3, 8B, 44, 24, 0C, 53, 85, C0, 74, 52, 8B, 54, 24, 08, 33, DB, 8A, 5C, 24, 0C, F7, C2, 03, 00, 00, 00, 74, 16, 8A, 0A, 83, C2, 01, 32, CB, 74, 72, 83, E8, 01, 74, 32, F7, C2, 03, 00, 00...
 
[+]

Code size:
956 KB (978,944 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Mailbell

Command:
"C:\Program Files\mailbell\mailbell.exe"


The file mailbell.exe has been discovered within the following program.

MailBell  by EmTec Innovative Software
Publisher's description - “MailBell is a mail and anti-spam utility that assists you with your email accounts. The program periodically checks one or multiple email accounts (POP3, IMAP, POP3/IMAP-SSL, MAPI, Gmail) and notifies you when new mail arrives by playing a sound or showing a notification window.”
www.emtec.com/mailbell/index.html?padfile
11% remove it
 
Powered by Should I Remove It?

Scan mailbell.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.