» zarafa-offline.exe
Overview
Analysis
File Details

zarafa-offline.exe

Zarafa BV

File name:

zarafa-offline.exe

Publisher:

Zarafa BV (signed and verified)

MD5:

8def89d3013c622eef5cf53e9c682d08

SHA-1:

6602651a4119c2987ad91fa53920193038e584da

SHA-256:

889f9cb0dacbe715c85703bd3ab8509119ebd937286b6df048b0bbc3590ca479

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/16/2024 10:10:43 PM UTC (today)

File size:

4 MB (4,205,240 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\zarafa\zarafa outlook client 6\zarafa-offline.exe

Digital Signature

Signed by:

Zarafa BV

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

7/5/2010 2:00:00 AM

Valid to:

6/3/2011 1:59:59 AM

Subject:

CN=Zarafa BV, OU=Application Development, O=Zarafa BV, L=Delft, S=ZH, C=NL

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

5B9CA32C4B54A2732E5F4A9A007F97F4

File PE Metadata

Compilation timestamp:

12/9/2010 10:51:53 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

98304:txdUoiCf+o8LIWsNyjgVt5vv0pH9msR4dxTpyLL2xjSUlS:NUzI+fLIWsNyjgVtZv0pH9msR4dxTpyF

Entry address:

0x2B1CEA

Entry point:

E8, 75, 0A, 00, 00, E9, 40, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E9, CC, FF, 25, F8, 94, 76, 00, FF, 25, F4, 94, 76, 00, FF, 25, F0, 94, 76, 00, FF, 25, EC, 94, 76, 00, FF, 25, E8, 94, 76, 00, FF, 25, E4, 94, 76, 00, FF, 25, E0, 94, 76, 00, FF, 25, DC, 94, 76, 00, FF, 25, D8, 94, 76, 00, FF, 25, D4, 94, 76, 00, FF, 25... 
[+]

Code size:

3.4 MB (3,570,688 bytes)

Scan zarafa-offline.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.