home

redemption64.dll

Outlook Redemption

4Team Corporation

Publisher:
dimastr.com  (signed by 4Team Corporation)

Product:
Outlook Redemption

Description:
Outlook Redemption COM library

Version:
5,1,0,2342

MD5:
c194351e00e2e22416fe97bf505a2021

SHA-1:
dfed610023e0b6303a4e13bdb48a8353b41d0200

SHA-256:
3688a3de7f850770f4006132a20cec5a2e5645dd4fa1d3b00a3b40675adcba3a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:03:44 AM UTC  (today)

File size:
6.6 MB (6,906,048 bytes)

Product version:
5.1

Copyright:
Copyright (c) 2000 - 2011 Dmitry Streblechenko

Original file name:
redemption.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\redemption64.dll

Digital Signature
Signed by:
4Team Corporation

Authority:
Starfield Technologies, Inc.

Valid from:
12/20/2011 1:55:29 PM

Valid to:
1/26/2014 10:22:12 AM

Subject:
CN=4Team Corporation, O=4Team Corporation, L=Coral Springs, S=FL, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
0491E93FB5D0B2

Registration
CLSIDs:
{03C4C5F4-1893-444C-B8D8-002F0034DA92}, {11E2BC0C-5D4F-4E0C-B438-501FFE05A382}, {29AB7A12-B531-450E-8F7A-EA94C2F3C05F}, {37587889-FC28-4507-B6D3-8557305F7511}, {3E8E0584-1B63-46DF-8783-EAE6DB9859DD}, {4A5E947E-C407-4DCC-A0B5-5658E457153B}

ProgIDs:
Redemption.MAPIFolder, Redemption.SafePostItem, Redemption.RDOSession, Redemption.AddressLists, Redemption.Addin, Redemption.MAPIUtils, Redemption.SafeContactItem, Redemption.SafeAppointmentItem, Redemption.SafeMailItem, Redemption.SafeTaskItem

COM registered:
Yes

File PE Metadata
OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.51

CTPH (ssdeep):
49152:4nzLhEbwRAGwmpaLNv8ZXCcMSX1Y/BiOxVB9GgxBaxccqJ1un1eYieqXYdC7yzl6:4ncog7KZyp9GU65FRl3CiC

Entry address:
0x17F20

Entry point:
48, 81, EC, 88, 00, 00, 00, C6, 05, 02, 61, 57, 00, 00, 48, 89, 0D, EB, 6F, 57, 00, 89, 15, C5, 6F, 57, 00, 44, 89, 05, CE, 6F, 57, 00, E8, 09, 03, 00, 00, 48, 81, C4, 88, 00, 00, 00, C3, 00, 48, 83, EC, 48, 48, 83, C4, 48, C3, 00, 00, 00, 00, 00, 00, 00, 48, 83, EC, 48, 48, 83, C4, 48, C3, 00, 00, 00, 00, 00, 00, 00, 55, 48, 89, E5, 48, 81, EC, 80, 00, 00, 00, 48, 89, 5D, E0, 48, 89, 7D, E8, 48, 89, 75, F0, 48, 89, 55, F8, 4C, 89, C6, 49, BB, 00, 00, 00, 00, 00, 00, 00, 00, 48, B8, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7505

Code size:
4.5 MB (4,686,704 bytes)

Scan redemption64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.