home

winspamcatcher.dll

Mailshell Anti-Spam SDK

Gozoom.com Inc.

Publisher:
Mailshell  (signed by Gozoom.com Inc.)

Product:
Mailshell Anti-Spam SDK

Version:
6,1,5,0

MD5:
92e10288080d5ae479cbdb1265a96208

SHA-1:
f16c743fd3af2962145762ffdb4caffd13332299

SHA-256:
45dc57eb9517c93c5708ca0b3b1c9ba9f17ece785b11b23c3b0a4a5ba83b1ffd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:57:11 PM UTC  (a few moments ago)

File size:
6.6 MB (6,964,136 bytes)

Product version:
6,1,5,0

Copyright:
Copyright (C) 2010 Mailshell

Original file name:
winspamcatcher.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\ProgramData\mfadata\selfupd\winspamcatcher.dll

Digital Signature
Signed by:
Gozoom.com Inc.

Authority:
Thawte, Inc.

Valid from:
8/12/2010 3:00:00 AM

Valid to:
8/31/2012 2:59:00 AM

Subject:
CN=Gozoom.com Inc., OU=DEVELOPMENT, O=Gozoom.com Inc., L=Santa Clara, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3BD20EC92F09190E61441D47F35A279C

File PE Metadata
Compilation timestamp:
10/15/2010 5:56:30 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:RzRR59ZL+UEXMCS3z+JldG5dwCF44DY34mBSbP0/f1NVq229cp:R5KXe3Ilp4mUrqf1NVqJ9cp

Entry address:
0x2050B3

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, D3, AE, 01, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 38, 53, 57, FF, 75, 08, 8D, 4D, C8, E8, 99, 18, FF, FF, 8B, 45, 10, 8B, 7D, 0C, 33, DB, 3B, C3, 74, 02, 89, 38, 3B, FB, 75, 2D, E8, E9, 21, FF, FF, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, BA, BC, FF, FF, 83, C4, 14, 38, 5D, D4, 74, 07, 8B, 45, D0, 83, 60, 70, FD, 33, C0, 33, D2, E9, 3F, 02, 00, 00, 39, 5D, 14, 74, 0C, 83, 7D, 14, 02...
 
[+]

Entropy:
6.3617

Code size:
2.3 MB (2,409,984 bytes)

The file winspamcatcher.dll has been discovered within the following program.

Norman Security Suite  by Norman ASA
Publisher's description - “Superior and easy to use internet security with effective antivirus and online activity protection. The redesigned antimalware engine offers better protection through identifying, blocking and cleaning all types of threats.”
www.norman.com
10% remove it
 
Powered by Should I Remove It?

Scan winspamcatcher.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.