Should I block it?

No, this file is 100% safe to run.

Additional versions

16,0,557,0	14.29%
15,6,220,0	42.86%
13,15,102,0	14.29%
13,11,103,0	14.29%
13,0,220,0	14.29%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegDeleteKeyW, RegCreateKeyW, RegSetValueExW, RegEnumKeyExA, RegSetValueExA, RegCreateKeyExA, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegDeleteValueA

kernel32.dll

DllMain

ole32.dll

CoGetClassObject, CoCreateInstance, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, CoCreateFreeThreadedMarshaler, CoInitializeEx, CoUninitialize, CoMarshalInterThreadInterfaceInStream, CoGetInterfaceAndReleaseStream

shell32.dll

SHGetFolderPathA

user32.dll

CallNextHookEx, wsprintfW, wsprintfA, LoadStringW, LoadStringA, MsgWaitForMultipleObjects, MessageBoxA, UnhookWindowsHookEx, SetWindowsHookExA, SendMessageA, LoadImageA, GetWindowTextA

wintrust.dll

WinVerifyTrust

Export table

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

EScnPlug.dll

McAfee VirusScan API by McAfee (Signed)

Remove EScnPlug.dll

Version:	13,0,220,0
MD5:	c852a29c2604821d43f073b7464fab13
SHA1:	b3c4ca210588e90c260fee895adabdc39c5730af
SHA256:	f5ddbb70d3d222332822c483c0ad066b89ab0b937625c35c1e96fbf835dde5be

Overview

EScnPlug.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

Details

File name:	EScnPlug.dll
Publisher:	McAfee, Inc.
Product name:	McAfee VirusScan API
Description:	McAfee VirusScan Email Scanner
Typical file path:	C:\Program Files\mcafee\virusscan\EScnPlug.dll
File version:	13,0,220,0
Product version:	13,0,0,0
Size:	422.82 KB (432,968 bytes)
Build date:	6/20/2008 11:36 PM
Certificate
Issued to:	McAfee
Authority (CA):	VeriSign
Effective date:	Thursday, October 6, 2011
Expiration date:	Tuesday, December 31, 2013
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No