Should I block it?

No, this file is 100% safe to run.

Additional versions

16,0,557,0	14.29%
15,6,220,0	42.86%
13,15,102,0	14.29%
13,11,103,0	14.29%
13,0,220,0	14.29%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegDeleteKeyW, RegCreateKeyW, RegSetValueExW, RegEnumKeyExA, RegSetValueExA, RegCreateKeyExA, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegDeleteValueA

kernel32.dll

DllMain

ole32.dll

CoGetClassObject, CoCreateInstance, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, CoCreateFreeThreadedMarshaler, CoInitializeEx, CoUninitialize, CoMarshalInterThreadInterfaceInStream, CoGetInterfaceAndReleaseStream

shell32.dll

SHGetFolderPathA

user32.dll

CallNextHookEx, wsprintfW, wsprintfA, LoadStringW, LoadStringA, MsgWaitForMultipleObjects, MessageBoxA, UnhookWindowsHookEx, SetWindowsHookExA, SendMessageA, LoadImageA, GetWindowTextA

wintrust.dll

WinVerifyTrust

Export table

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

EScnPlug.dll

McAfee VirusScan API by McAfee (Signed)

Remove EScnPlug.dll

Version:	15,6,220,0
MD5:	4298f841de5bbda4e6eb3cb0312a3fe4
SHA1:	6f3d566e251563967a603cf025e6585f064f91c7

Overview

EScnPlug.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

Details

File name:	EScnPlug.dll
Publisher:	McAfee, Inc.
Product name:	McAfee VirusScan API
Description:	McAfee VirusScan Email Scanner
Typical file path:	C:\Program Files\mcafee\virusscan\EScnPlug.dll
File version:	15,6,220,0
Product version:	15,6,0,0
Size:	365.55 KB (374,320 bytes)
Certificate
Issued to:	McAfee
Authority (CA):	VeriSign
Effective date:	Thursday, October 6, 2011
Expiration date:	Tuesday, December 31, 2013
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No