» wodSmtp.DLL
Overview
Analysis
File Details

wodSmtp.DLL

wodSmtp Client Component

WeOnlyDo Software

File name:

wodSmtp.DLL

Publisher:

WeOnlyDo! COM (signed by WeOnlyDo Software)

Product:

wodSmtp Client Component

Version:

1, 2, 3, 26

MD5:

cbab9123640facea1173b928388126bd

SHA-1:

23301fb415ffdd39790c7945520cc96174a1bb2c

SHA-256:

0fa5fefc253f64a61a13e2457f693e0f6b989b6efb342401f4f2551bedf29ab3

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/24/2024 7:49:31 PM UTC (today)

Scan engine

Detection

Engine version

Vba32 AntiVirus

suspected of Win32.BrokenEmbeddedSignature

16.02.05

File size:

724.3 KB (741,656 bytes)

Product version:

1, 2, 3, 26

Trademarks:

Original file name:

wodSmtp.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Windows\System32\wodsmtp.dll

Digital Signature

Signed by:

WeOnlyDo Software

Authority:

The USERTRUST Network

Valid from:

9/8/2005 3:00:00 AM

Valid to:

9/9/2006 2:59:59 AM

Subject:

CN=WeOnlyDo Software, O=WeOnlyDo Software, STREET="501 Silverside Road, Suite 105", L=Wilmington, S=DE, PostalCode=19809, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00839A64D723FE3F788FEA291E44D58D8E

Registration

CLSIDs:

{07ED7A7D-5A91-4550-90AC-B755EE709001}, {0C62D803-DE43-4B3D-B259-00AB7AA46B84}, {5BBDC975-2FD4-400A-8608-650924ED17E0}, {823AF2BC-81AC-4463-8F59-A92585574C1B}, {A78388B9-D3E6-4920-8CB7-1C0F9B604FC4}, {C8E09582-C0E4-4D67-9309-F2B86F99119B}

ProgIDs:

WeOnlyDo.SmtpHdrs.1, WeOnlyDo.wodSmtpCom.1, WeOnlyDo.SmtpHdr.1, WeOnlyDo.SmtpMsgs.1, WeOnlyDo.SmtpEncoder.1, WeOnlyDo.SmtpMsg.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

10/17/2005 2:30:14 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

12288:TnrvNUj2idrpvp8gQCjPT7LXq5S+KP4udbRkvN2dC:TrvNTidrIgdjPT7YSD4uFUN2dC

Entry address:

0x70D65

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, F8, 71, 09, 78, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 0C, 72, 09, 78, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, 15, FF, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 3A, 2D, F9, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, F1, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, E0, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Developed / compiled with:

Microsoft Visual C++ 6.0

Code size:

460 KB (471,040 bytes)

Scan wodSmtp.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.