Should I block it?

No, this file is 100% safe to run.

Additional versions

16,0,557,0	14.29%
15,6,220,0	42.86%
13,15,102,0	14.29%
13,11,103,0	14.29%
13,0,220,0	14.29%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegDeleteKeyW, RegCreateKeyW, RegSetValueExW, RegEnumKeyExA, RegSetValueExA, RegCreateKeyExA, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegDeleteValueA

kernel32.dll

DllMain

ole32.dll

CoGetClassObject, CoCreateInstance, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, CoCreateFreeThreadedMarshaler, CoInitializeEx, CoUninitialize, CoMarshalInterThreadInterfaceInStream, CoGetInterfaceAndReleaseStream

shell32.dll

SHGetFolderPathA

user32.dll

CallNextHookEx, wsprintfW, wsprintfA, LoadStringW, LoadStringA, MsgWaitForMultipleObjects, MessageBoxA, UnhookWindowsHookEx, SetWindowsHookExA, SendMessageA, LoadImageA, GetWindowTextA

wintrust.dll

WinVerifyTrust

Export table

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

EScnPlug.dll

McAfee VirusScan API by McAfee (Signed)

Remove EScnPlug.dll

Version:	13,15,102,0
MD5:	427ae3e3a96e337039926eb7251a2557
SHA1:	cc0bc3ffca912eb88473951b9455f32edd1bc17b
SHA256:	b08e9dcd13c44d3595020f086220b7b53248cd4a996763ad20ccbd749987f3a2

Overview

EScnPlug.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

Details

File name:	EScnPlug.dll
Publisher:	McAfee, Inc.
Product name:	McAfee VirusScan API
Description:	McAfee VirusScan Email Scanner
Typical file path:	C:\Program Files\mcafee\virusscan\EScnPlug.dll
File version:	13,15,102,0
Product version:	13,15,0,0
Size:	425.02 KB (435,216 bytes)
Build date:	9/16/2009 9:17 AM
Certificate
Issued to:	McAfee
Authority (CA):	VeriSign
Effective date:	Thursday, October 6, 2011
Expiration date:	Tuesday, December 31, 2013
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No