home

Echoworx Corporation

Publisher Information

Echoworx Corporation is a software publisher located in Toronto, Ontario in Canada*. Thre are 7 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
8/14/2013 11:08:27 AM

Valid to:
12/4/2014 3:19:48 PM

Subject:
CN=Echoworx Corporation, OU=Certificate Authority, O=Echoworx Corporation, L=Toronto, S=Ontario, C=CA

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121040b18522aa238c18a8ef5c3d4a26dc5

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

MicroWorld eScan
Gen:Trojan.Heur.KT.4.nv9@aylnSrai, Gen:Trojan.Heur.KT.4.nv9@aaqdGyki
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0709, Suspicious_GEN.F47V1029
100.00%

Lavasoft Ad-Aware
Gen:Trojan.Heur.KT.4.nv9@aylnSrai, Gen:Trojan.Heur.KT.4.nv9@aaqdGyki
100.00%

F-Secure
Gen:Trojan.Heur.KT.4.nv9@aylnSrai, Gen:Trojan.Heur.KT.4.nv9@aaqdGyki
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.179377B9!395540409
50.00%

0 / 68
gatewayencrypt64.dll (Gateway Encryption by Echoworx)  (93c25be45ee6e76f6f9ee4d2ac856ce2)

0 / 68
InstallationHelper.dll (Encryption Services by Echoworx)  (f7fab25fb43b4c15874bdef2ff1635a5)

0 / 68
encryptedmail.exe (Echoworx Self-Extractor by Echoworx)  (e0a7ac1239b279ceff8c91adb70ec411)

0 / 68
InstallationHelper.dll (Encryption Services by Echoworx)  (be8df9c173786ca0d3174639517cf7bd)

0 / 68
encryptedmailreaderbm.exe (Echoworx Self-Extractor by Echoworx)  (5cf883980d5bdd010934aeef24c26dab)

0 / 68
smtool64.exe (Encryption Services by Echoworx)  (b04185bc9645b4d4a850e1bb7b201a77)

0 / 68
ewsmresources64.dll (Encryption Services by Echoworx)  (3949afe7f5bd962aea318c89004826a6)

0 / 68
gatewayencrypt.dll (Gateway Encryption by Echoworx)  (ebf8651f783a296b3e867a4a448a3f46)

0 / 68
InstallationHelper.dll (Gateway Encryption by Echoworx)  (b36f9ec979c0c04cf76942b134ef546b)

0 / 68
ewmonitor.exe (Gateway Encryption by Echoworx)  (008930bfaa03191efb66cfad5ce39faf)

0 / 68
securereader.exe (Encryption Services by Echoworx)  (6107d34b48676fd4e2653c2bedf3b7f1)

0 / 68
EWOutlExt.DLL (Encryption Services by Echoworx)  (880ecdeddce7e0a1f8ede18d25a0ae89)

0 / 68
SMTool.EXE (Encryption Services by Echoworx)  (bda3b145116f3ef15b6266a65eaea4ac)

0 / 68
EwInitEventMessages.dll (Encryption Services by Echoworx)  (08ed212a9c4963b7fdc1e2d8bef883f2)

0 / 68
eweventmessagesresources.dll (Encryption Services by Echoworx)  (f053724c13df65001282fed148714d56)

0 / 68
EwElevation.dll (Encryption Services by Echoworx)  (fdb423bbc0ecf8659c927b1339754e7f)

5 / 68      (inconclusive)
securemail.exe (Echoworx Self-Extractor by Echoworx)  (775b5394d1c3ad6ee713f89b8bc63e1e)

0 / 68
EwUpdater.EXE (Encryption Services by Echoworx)  (33a042db62486878cb0b22987add9842)

0 / 68
EwSMResources.dll (Encryption Services by Echoworx)  (fd93635fae2faf68a534b79c69c3c95c)

0 / 68
EwFileEncryptShellExt.dll (Encryption Services by Echoworx)  (9f830d54cd790a8cf376a6538acd8d90)

0 / 68
securereader.exe (Encryption Services by Echoworx)  (ca52e8a094de5b75dce22790a2d7940c)

0 / 68
EWOutlExt.DLL (Encryption Services by Echoworx)  (083015d4083fda5141b89d0c261e9125)

0 / 68
smtool64.exe (Encryption Services by Echoworx)  (96a8502fdb0e5c317ded9f50f5c51b3a)

0 / 68
SMTool.EXE (Encryption Services by Echoworx)  (497bc15de466a597a242bfe1ef5cf999)

0 / 68
EwUpdater.EXE (Encryption Services by Echoworx)  (09cb12aca3bbe806c7c30b43778b54f4)

0 / 68
ewsmresources64.dll (Encryption Services by Echoworx)  (922f20fdf11c43b24f4e327ea8255b82)

0 / 68
EwSMResources.dll (Encryption Services by Echoworx)  (991c8db13fedeaa34fa55b52c49e5d21)

0 / 68
EwInitEventMessages.dll (Encryption Services by Echoworx)  (64df0a5a32cf0f02be0e6199e03126d6)

0 / 68
eweventmessagesresources.dll (Encryption Services by Echoworx)  (72adf25a0b807c20c43c4cb2577fbe45)

0 / 68
EwElevation.dll (Encryption Services by Echoworx)  (6127c3d59de6702db88f20e5c8b556c8)

 
Latest 30 of 31 files

Downloads URLs for files signed by Echoworx Corporation.

0 / 68
http://rc.ips.emailprivacy.net/.../EncryptedMail.exe  (e0a7ac1239b279ceff8c91adb70ec411)

0 / 68
https://rc.ssm.echoworx.net/DownloadManager?file=EncryptedMailReaderBM.exe&returnurl=pr.ssm.echoworx.net&denypage=brand?act=download&entp=&locale=&cat=Resource_Center&f=denied.html&fullname=MessageLabs  (5cf883980d5bdd010934aeef24c26dab)

The following websites host and distribute files published by Echoworx Corporation.

rc.ips.emailprivacy.net

rc.ssm.echoworx.net

The certificates below are also signed by Echoworx Corporation.

00  (Apr 09, 2000 to May 24, 2020)

112192689ED6872FC9CFBA0113ED6B6F9A8F  (Nov 30, 2015 to Feb 03, 2017)

1121DBE2A7B67EF9A3E46BE1034A6EE927AA  (Sep 08, 2014 to Jan 04, 2016)

11215329DFEC5FA13C161D7B34A6AF976388  (Sep 05, 2012 to Nov 03, 2013)

11211EDAA3E116910A235E7250C08A3070BD  (Aug 11, 2011 to Oct 03, 2012)

0100000000012AD432092E  (Sep 02, 2010 to Sep 03, 2011)

010000000001240CA51743  (Sep 30, 2009 to Oct 01, 2010)

* Note, the details and description above are based on the code signing digital signature issued to Echoworx Corporation by GlobalSign nv-sa on August 14, 2013 with the serial number '1121040b18522aa238c18a8ef5c3d4a26dc5'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.