home

mesamode.dll

MD5:
1099e5aef4c82ae54ab6571a0f97fa4d

SHA-1:
36fb3709e432df7247401e2e3d2940a59514d4d7

SHA-256:
df81d61f8e2f207c80689afc68db61bedcde5db9fbe0776617056507434614d5

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 12:20:36 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Packed.Unknown
13861

File size:
18.5 KB (18,944 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\esignal\mesamode.dll

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.52

CTPH (ssdeep):
384:KxVWku8OtKhGMRz33voc0RWY023TkQZGdtNWS7rmkZK5G:KcshGMRz33voc0RWYj3TkQZGxWKj

Entry address:
0x31A0

Entry point:
55, 8B, EC, 53, 56, 57, BB, 00, 40, 40, 00, 66, 2E, F7, 05, 4A, 37, 40, 00, 04, 00, 0F, 85, 9E, 00, 00, 00, E8, F2, 01, 00, 00, C7, 83, 84, 00, 00, 00, 01, 00, 00, 00, 8D, 83, 0C, 02, 00, 00, 50, FF, 15, 48, 51, 40, 00, 83, EC, 44, C7, 04, 24, 44, 00, 00, 00, C7, 44, 24, 2C, 00, 00, 00, 00, 54, FF, 15, 40, 51, 40, 00, B8, 0A, 00, 00, 00, F7, 44, 24, 2C, 01, 00, 00, 00, 74, 05, 0F, B7, 44, 24, 30, 83, C4, 44, 89, 43, 7A, FF, 15, 30, 51, 40, 00, E8, 6B, 03, 00, 00, 89, 43, 70, FF, 15, 34, 51, 40, 00, 89, 43...
 
[+]

Entropy:
5.4440

Developed / compiled with:
Microsoft Visual C++

Code size:
11.1 KB (11,401 bytes)

Scan mesamode.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.