home

ElcomSoft Co.Ltd.

Publisher Information

ElcomSoft Co.Ltd. is a software developer located in Moscow, Russia*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
8/18/2006 2:00:00 AM

Valid to:
9/25/2009 1:59:59 AM

Subject:
CN=ElcomSoft Co.Ltd., OU=Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ElcomSoft Co.Ltd., L=Moscow, S=Moscow, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
76c04d7ecfe63d62bbe057b5375481f5

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Reason Heuristics
Trojan.Kryptik, Trojan.Dropper, Trojan.Downloader
42.86%

ESET NOD32
Win32/TrojanDownloader.Nymaim.BA trojan, Win32/Kryptik.EYBY trojan, Win32/Kryptik.FCMI trojan, Win32/Kryptik.EXUF trojan
35.71%

avast!
Win32:Trojan-gen, Win32:Malware-gen
21.43%

Dr.Web
Trojan.Inject2.24448, Tool.PassSteel.80, Trojan.Nymaim.36
21.43%

Quick Heal
(Suspicious) - DNAScan
21.43%

Kaspersky
Trojan.Win32.Nymaim, not-a-virus:PSWTool.Win32.AdvancedPR
14.29%

Emsisoft Anti-Malware
Trojan.GenericKD.3408009, Riskware.PSWTool.Win32.AdvancedPR!IK
14.29%

Sophos
Mal/Generic-S, Elcom Password Recovery
14.29%

Avira AntiVirus
TR/Crypt.ZPACK.nhzj, ADSPY/Lop.CG
14.29%

Microsoft Security Essentials
Trojan:Win32/Matsnu.Q, Trojan:Win32/Peals.E!cl
14.29%

2 / 68
225514209.exe  (d063293feae5d74adc03008d2aa6fc56)

0 / 68
esprp.exe (Elcomsoft Password Recovery by Elcomsoft Co)  (292aa4996b40a1c12227c64b298efdda)

1 / 68
setup.exe  (dda597a8c611ff0f2b4c378159d8646e)

0 / 68
esdpr.exe (ElcomSoft Distributed Password Recovery by ElcomSoft Co)  (9e5aa3ccfded1922362f4f56a3fb53b8)

0 / 68
esdprs.exe (ElcomSoft Distributed Password Recovery by ElcomSoft Co)  (bf30ae5c92177f266e250d32809826d1)

1 / 68      (inconclusive)
37a5.tmp (by InSoft)  (9e13f024e1546cb3c0dd245c26827c70)

0 / 68
ap411.dat  (2a79376cb3d4613bd8cacdf28298374c)

1 / 68      (Malware)
8507.tmp  (dc3a1ea24ea5ebb178baac36db2a5613)

1 / 68      (Malware)
67a7.tmp  (186e8cb9b5ba35825a400b49cb677122)

4 / 68      (Malware)
diode-3.exe  (b66616920117f93c8f31c9c6c937d8cf)

1 / 68      (Malware)
6d56.tmp  (f502c19485261f3a0e88060a87d6ddb6)

1 / 68      (Malware)
ccfe.tmp  (994647d5236915a726edbe2d4891cc80)

0 / 68
setup.exe  (8cf7a5817ab9e0d77d7965ff2d119453)

0 / 68
9de1.tmp  (914bdd62b0f9125756dea87e06cc97b6)

0 / 68
esdpr.exe (Elcomsoft Distributed Password Recovery by Elcomsoft Co)  (df46c3808cc43a9635233effa9ba7798)

0 / 68
AOPR.exe (Advanced Office Password Recovery by ElcomSoft Co.Ltd)  (661189e56eb1f66954ae8e2d4ad1ab28)

0 / 68
setup.exe  (5d01753b7c9f2fecfe98f61dd0d7cb1a)

0 / 68
esdprs.exe (Elcomsoft Distributed Password Recovery by Elcomsoft Co)  (4ac1c0c4fe5dff52ed66da26190222d7)

0 / 68
esdpr.exe (Elcomsoft Distributed Password Recovery by Elcomsoft Co)  (b8e3a0c7aacc3fd44009cff900c61403)

0 / 68
esda.exe (Elcomsoft Distributed Password Recovery by Elcomsoft Co)  (1868458a30ce273efeecf4f230098a60)

0 / 68
agent_setup.exe  (d9d3a3dbb47c4486cdfce8ce9046a8e8)

0 / 68
esprp.exe (Elcomsoft Password Recovery by Elcomsoft Co)  (05d256eeec967d6a2dc2df2bc87a6b03)

0 / 68
esdpr.exe (Elcomsoft Distributed Password Recovery by Elcomsoft Co)  (df94d0a7fd85f58982bbe277be0ed29f)

0 / 68
esprp.exe (Elcomsoft Password Recovery by Elcomsoft Co)  (98a33757636629a373c339416c0664ff)

0 / 68
esda.exe (Elcomsoft Distributed Password Recovery by Elcomsoft Co)  (f6544671db6fbeec072b213b66a7f277)

0 / 68
esdprs.exe (Elcomsoft Distributed Password Recovery by Elcomsoft Co)  (b5abb8eb264ee1042689d2ef1f6ad2d2)

0 / 68
setup.exe  (1fe89f6628a971a6e97e5eaa7e5a543e)

0 / 68
setup.exe  (edae9f1583436ba58f8b75115bffb1be)

0 / 68
setup.exe  (c7917d0be9de13e8bbb17be0dece505f)

0 / 68
AOPR.exe (Advanced Office Password Recovery by ElcomSoft Co.Ltd)  (68127eb43aecc8d7f4c3ea7eb87df5bc)

 
Latest 30 of 1,122 files

The certificates below are also signed by ElcomSoft Co.Ltd..

09C0CDCEEA0076B38C76210A92AD35CA  (Sep 22, 2009 to Sep 22, 2012)

57AFE5C6775E9EEFC5C10A839682C12D  (Jul 15, 2005 to Sep 04, 2006)

31743A5CFEB1696D22C601A5C8C8BF47  (Aug 09, 2004 to Aug 09, 2005)

* Note, the details and description above are based on the code signing digital signature issued to ElcomSoft Co.Ltd. by VeriSign, Inc. on August 18, 2006 with the serial number '76c04d7ecfe63d62bbe057b5375481f5'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.