home

ECProps.DLL

Zarafa Outlook Client plugin

Zarafa BV

Publisher:
Zarafa  (signed by Zarafa BV)

Product:
Zarafa Outlook Client plugin

Description:
ECProps Module

Version:
41388

MD5:
e1636af5b94806530113d415485dd722

SHA-1:
034223ed47ffebaca6bb1c420c3601b655a8bada

SHA-256:
75e28809b068d470f5c5bb3bc6b3fb1165813f245c4bbfe8f32faf8c91e02314

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/19/2024 11:14:15 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Avira AntiVirus
W32/Ramnit.A
7.11.30.172

File size:
1001.1 KB (1,025,112 bytes)

Product version:
7,0,13,41388

Copyright:
Copyright © 2006

Original file name:
ECProps.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\zarafa\zarafa outlook client\ecprops.dll

Digital Signature
Signed by:
Zarafa BV

Authority:
Thawte, Inc.

Valid from:
5/15/2012 2:00:00 AM

Valid to:
6/2/2013 1:59:59 AM

Subject:
CN=Zarafa BV, OU=Application Development, O=Zarafa BV, L=Delft, S=Zuid-Holland, C=NL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
367785321CD19021336B7A5510E9D79E

Registration
CLSIDs:
{1ADE9195-1972-4528-9270-D2CCC8FFE04E}, {30A9FDC8-77AE-42E9-8B0B-4DB8EEFCB1F6}, {432C514A-6AE7-4F9B-B415-6ACD87BD17D1}, {AB9BCC08-C970-413D-A380-8CA6E0D38BE5}, {E97DC7CE-3BE7-4CE4-B999-EAD7F2BF3018}, {EC8D7CF5-C4B7-4601-810E-367471C569E8}

ProgIDs:
ECProps.ECFreeBusyOl2k.1, ECProps.Addin.1, ECProps.ECDelegatePropPage.1, ECProps.ECFreeBusy.1, ECProps.ECFavoritePropPage.1, ECProps.PropPage.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
2/28/2013 3:57:34 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:y9ZkD38st0LdSm560QJOwAMHiWBHRTIc52YIdKbHcU+:y9SJ0LduiWBxTKYIdoHcU+

Entry address:
0x904A0

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, C6, 07, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, FF, 25, 30, C5, 09, 10, FF, 25, 2C, C5, 09, 10, FF, 25, 28, C5, 09, 10, FF, 25, 24, C5, 09, 10, FF, 25, 20, C5, 09, 10, FF, 25, 1C, C5, 09, 10, FF, 25, 18, C5, 09, 10, FF, 25, 14, C5, 09, 10, FF, 25, 10, C5, 09, 10, FF, 25, 0C, C5, 09, 10, FF, 25, 08, C5, 09, 10, FF, 25, 04, C5, 09, 10, FF, 25, 00, C5, 09, 10, FF, 25, FC, C4, 09, 10, FF, 25, F8, C4, 09, 10, FF, 25...
 
[+]

Entropy:
6.5580

Code size:
618.5 KB (633,344 bytes)

Scan ECProps.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.