home

ecwKernel.dll

eCwKernel

eClinicalWorks LLC

Publisher:
eClinicalWorks LLC  (signed and verified)

Product:
eCwKernel

Version:
10.00.0111

MD5:
8e5980eb70ff673645da7aee95da4b31

SHA-1:
d2a7aeb34d3190d32e69b958d56166b3df3c7564

SHA-256:
94615821b45c321fbc0d6e0fe0df9b9e1a4f45f584d8edb81e3fef9b612af89e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 12:14:57 PM UTC  (today)

File size:
342.3 KB (350,512 bytes)

Product version:
10.00.0111

Original file name:
ecwKernel.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\eclinicalworks\ecwkernel.dll

Digital Signature
Signed by:
eClinicalWorks LLC

Authority:
VeriSign, Inc.

Valid from:
1/10/2012 4:00:00 PM

Valid to:
3/10/2015 4:59:59 PM

Subject:
CN=eClinicalWorks LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=eClinicalWorks LLC, L=Westborough, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
629DD1D09AA3E306495C400452FC472E

File PE Metadata
Compilation timestamp:
12/18/2014 8:31:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:kE+HWgxrhRiSeAc8gYURSNYF6i/k2w4OmIBlVhg/v2P43YlV0u:cvxrhI9GYAi/k2w4OmIBlVhgX29V5

Entry address:
0x35CC

Entry point:
5A, 68, 04, 13, 04, 11, 68, 08, 13, 04, 11, 52, E9, E7, FF, FF, FF, 00, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, CE, 9F, 18, 72, 3D, 18, 29, 4B, BA, A0, 16, 98, DA, 9E, 2F, F8, 00, 00, 00, 00, 00, 00, 01, 00, 09, 00, 36, 46, 32, 2D, 31, 30, 65, 43, 77, 4B, 65, 72, 6E, 65, 6C, 00, 30, 30, 32, 42, 32, 46, 00, 39, 46, 42, 7D, 23, 31, 2E, 08, 01, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 0C, 00, 00, 00, 92, B5, 5D, 3C, 45, 6F, F2, 48, A7, 97, 6E, E2, D0, AD, 08, 0E...
 
[+]

Entropy:
5.4305

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
248 KB (253,952 bytes)

Scan ecwKernel.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.