» redemption64.dll
Overview
Analysis
File Details
Programs (1)

redemption64.dll

Outlook Redemption

Advanced Messaging Systems LLC

File name:

redemption64.dll

Publisher:

Advanced Messaging Systems LLC (signed and verified)

Product:

Outlook Redemption

Description:

Outlook Redemption COM library

Version:

5.3.0.2664

MD5:

e0706f1056019bf0935ec233e2f5b2e8

SHA-1:

928a0e5da115bf7f33e5522d8a89fb517c160551

SHA-256:

5c3a49398f934e4ed1f5c2d795fc7dd4e7c66f7899fe88aae6c9285a72301bd2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 12:10:04 AM UTC (today)

File size:

9.1 MB (9,571,968 bytes)

Product version:

5.3

Original file name:

redemption.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\westlaw caselogistix\westlaw waypoint\redemption64.dll

Digital Signature

Signed by:

Advanced Messaging Systems LLC

Authority:

COMODO CA Limited

Valid from:

11/10/2011 6:00:00 PM

Valid to:

11/10/2014 5:59:59 PM

Subject:

CN=Advanced Messaging Systems LLC, O=Advanced Messaging Systems LLC, STREET=4701 E. Mossman Rd., L=Phoenix, S=AZ, PostalCode=85050, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

3AC5A1500A3B51BA6DE99B69319F10D7

File PE Metadata

Compilation timestamp:

3/8/2012 12:12:34 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:LACJibP0aX1eST8ZEnS+IoeoV40w4xWbOfK4q1rsmEpsYudR/WoHidD4y5KiORPk:s8foeotJxWh9Gmis3HDX55kNc6+gRJU+

Entry address:

0x72B790

Entry point:

55, 48, 81, EC, 90, 00, 00, 00, 48, 8B, EC, 48, 89, 4D, 30, 89, 55, 3C, 4C, 89, 45, 40, 90, 48, 8D, 4D, 48, 48, 8D, 15, 36, 6A, FE, FF, 4C, 8B, 45, 30, 44, 8B, 4D, 3C, 48, 8B, 45, 40, 48, 89, 44, 24, 20, E8, A8, 7D, 8E, FF, E8, C3, 0A, 8E, FF, C7, 85, 8C, 00, 00, 00, 01, 00, 00, 00, EB, 17, 90, 90, E8, F0, 0C, 8E, FF, 85, C0, 0F, 94, C0, 48, 0F, B6, C0, 89, 85, 8C, 00, 00, 00, 90, 8B, 85, 8C, 00, 00, 00, 48, 8D, A5, 90, 00, 00, 00, 5D, C3, 90, 48, 83, EC, 28, E8, F7, 00, 8E, FF, 48, 83, C4, 28, C3, CC, CC... 
[+]

Entropy:

5.9497

Code size:

7.2 MB (7,514,624 bytes)

The file redemption64.dll has been discovered within the following program.

Westlaw WayPoint by Thomson Reuters

www.ThomsonReuters.com

About 3% of users remove it

Scan redemption64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.