» MessageProtocolX.dll
Overview
Analysis
File Details
Behaviors (1)

MessageProtocolX.dll

MessageProtocolX

Kaseya

File name:

Publisher:

Kaseya International Limited (signed by Kaseya)

Product:

MessageProtocolX

Description:

MessageProtocolX DLL

Version:

1,0,0,10

MD5:

9fe492a960d6bd392b1ebedcb5770063

SHA-1:

8250db78ee6f635df316275aef444d77ad93a610

SHA-256:

f9a3dd0f61b49895ea199f29675eaf9b5f87e3001f5355f099f8ae8f2c429399

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

7/12/2025 8:50:57 AM UTC (today)

File size:

812.6 KB (832,128 bytes)

Product version:

1,0,0,10

Trademarks:

http://www.kaseya.com/jp/trademark-guidelines.aspx

Original file name:

MessageProtocolX.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\windows\downloaded Program Files\messageprotocolx.dll

Digital Signature

Signed by:

Kaseya

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

3/25/2008 8:00:00 PM

Valid to:

6/16/2010 7:59:59 PM

Subject:

CN=Kaseya, OU=SECURE APPLICATION DEVELOPMENT, O=Kaseya, L=Milpitas, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

7144E6AB75F0746E936AD64006CD8704

File PE Metadata

Compilation timestamp:

5/3/2010 9:37:30 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:2HcAkFy4Lv763WRJfeJ+q3KG5jMvNymkanY5ZOgbIYNYQ6qJn1:tAkMUWKoF3KGANY5wrYNYQ6qJn1

Entry address:

0x4B850

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, A2, A3, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 8B, 44, 24, 04, 85, C0, 56, 8B, F1, C6, 46, 0C, 00, 75, 63, E8, CC, 70, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 38, 4B, 0B, 10, 74, 12, 8B, 0D, 54, 4A, 0B, 10, 85, 48, 70, 75, 07, E8, 73, 48, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 60, 50, 0B, 10, 74, 16, 8B, 46, 08, 8B, 0D, 54, 4A, 0B, 10, 85, 48, 70, 75, 08, E8, D3, A5, 00, 00, 89, 46, 04... 
[+]

Entropy:

6.3830

Code size:

516 KB (528,384 bytes)

ActiveX Install

Name:

{62FA83F7-20EC-4D62-AC86-BAB705EE1CCD}

Scan MessageProtocolX.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.