home

Save Raven

Publisher Information

Save Raven is a software publisher located in Los Angeles, California in the United States*. There is one additional code signing certificate issued to this publisher.
Authority:
Symantec Corporation

Valid from:
11/2/2016 12:00:00 AM

Valid to:
11/5/2017 11:59:59 PM

Subject:
CN=Save Raven, O=Save Raven, L=Los Angeles, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
4f14cbf2d3eebff0b3c1d00216241ae7

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP (M)
100.00%

1 / 68      (Malware)
plugin.exe  (a77cc035ab4c1e35bab465664795759e)

1 / 68      (Malware)
plugincontainer.exe  (7fd1ed822c85093ac8b131b80c7730c1)

1 / 68      (Malware)
plugin.exe  (699a27dc93c434e90b5a2f9eb9b3aa57)

1 / 68      (Malware)
plugin.exe  (2c92900ebdadec5845f7afbc7830045f)

1 / 68      (Malware)
plugincontainer.exe  (a58cf201cdd74bb456e9206ed117f094)

1 / 68      (Malware)
47.0.0.dll  (16fedc29d41cb6cc8f899660667b49d9)

1 / 68      (Malware)
45.0.1.dll  (4984c51859c7460159650463a9dbfb4d)

1 / 68      (Malware)
40.0.0.dll  (39972c8daaeaa66a0262598bbf1835b7)

1 / 68      (Malware)
plugin.exe  (d5ccfb4899480b82391e4d915c0ebbab)

1 / 68      (Malware)
plugin.exe  (3e92c2be5542974958bff0a5c56fd56d)

1 / 68      (Malware)
plugin.exe  (603bac9c2be5a343986bcc76ac125068)

1 / 68      (Malware)
plugincontainer.exe  (69ddf3aa71dba8c34c8e3c64681ba7ac)

1 / 68      (Malware)
plugin.exe  (1d5528a622a657d74d179d08d08f43e9)

1 / 68      (Malware)
plugin.exe  (4bcdce0429f2b8d52570b87e72b898da)

1 / 68      (Malware)
plugin.exe  (6047ad05f35692caf7544278f3e96a96)

1 / 68      (Malware)
plugin.exe  (38a5b5421328c078f21fee171162d7bc)

1 / 68      (Malware)
{0f376f4e-9939-445e-a4d3-32c29e94c17f}.dll  (e83585aaf366030abf0cbae5a395479d)

1 / 68      (Malware)
plugin.exe  (6d8e7c7d2552b39fa97455de7758896d)

1 / 68      (Malware)
plugincontainer.exe  (b35bc9b75d252d153dbbf5f1bae1d22a)

1 / 68      (Malware)
plugin.exe  (9c163eb80d56e35d2be1c0dda8bf92bf)

1 / 68      (Malware)
47.0.0.dll  (90243f6d51b6b494669b379fdf58de31)

1 / 68      (Malware)
45.0.1.dll  (0fe4693db68febf11fc75b04ce30c026)

1 / 68      (Malware)
40.0.0.dll  (05a8ba6be1d1d1ecfd44bb090d86206d)

1 / 68      (Malware)
plugin.exe  (3d9fe96b4195b531cd40178ae4021e12)

1 / 68      (Malware)
plugin.exe  (f3cd09f163b12f4ec8ff06843cad6b20)

1 / 68      (Malware)
plugin.exe  (af0139fbc0731282ce9e8d2914436b46)

1 / 68      (Malware)
plugin.exe  (c6639b708b060276360c082147b53c69)

1 / 68      (Malware)
plugin.exe  (7e0296de8fe03e3a34d232633aacbe10)

1 / 68      (Malware)
plugin.exe  (9c2c8e9380ec8c1101dee01e9c07ae0e)

1 / 68      (Malware)
{8e2ed84a-6633-4abe-83af-5389eda8a134}.dll  (438412fdd5b84d138635fc6dd70bfa2f)

 
Latest 30 of 24,580 files

The following certificate is also signed by Save Raven.

3D0C79307624C9848503D112B5E397A0  (Oct 29, 2015 to Oct 29, 2016)

* Note, the details and description above are based on the code signing digital signature issued to Save Raven by Symantec Corporation on November 02, 2016 with the serial number '4f14cbf2d3eebff0b3c1d00216241ae7'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.