home

ElcomSoft Co.Ltd.

Publisher Information

ElcomSoft Co.Ltd. is a software developer located in Moscow, Russia*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
7/15/2005 2:00:00 AM

Valid to:
9/4/2006 1:59:59 AM

Subject:
CN=ElcomSoft Co.Ltd., OU=Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ElcomSoft Co.Ltd., L=Moscow, S=Moscow, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
57afe5c6775e9eefc5c10a839682c12d

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Quick Heal
(Suspicious) - DNAScan, PSWTool.PPTools.b.n6 (Not a Virus), PSWTool.PPTools.g5 (Not a Virus)
69.57%

Sophos
Sus/Behav-325, Elcom Password Recovery, Generic PUA NC (PUA)
34.78%

Clam AntiVirus
PUA.Packed.ASPack, PUA.Packed.ASPack212
30.43%

Kaspersky
not-a-virus:Client-SMTP.Win32.Blat, not-a-virus:PSWTool.Win32.AdvancedPR, not-a-virus:PSWTool.Win32.PPTools
13.04%

Dr.Web
Tool.ShowPass
13.04%

VIPRE Antivirus
Trojan.Win32.Generic, Advanced Archive Password Recovery, PSWTool.Win32.PPTools.GeN
13.04%

Avira AntiVirus
SPR/PSW.PPTools.B, DR/PSW.PPTools.A, DR/PSW.PPTools.B
13.04%

McAfee
Generic PUP.z, Artemis!609AC4BDD567
13.04%

Bkav FE
W32.Clodf84.Trojan, W32.eHeur.Virus06
8.70%

AegisLab AV Signature
Troj.Spy.W32.Agent, DR-PSW.PPTools.ly8F
8.70%

0 / 68
setup.exe  (61ddd550217e9cbca9b41f7dd81348ac)

0 / 68
setup.exe  (6221e2a14b3dda4257418cb7db2a8462)

0 / 68
setup.exe  (4b2aea4e266acdf8d988b95aab423bdb)

3 / 68
setup.exe  (bfb405935a8233914d338a63506709f1)

16 / 68    (Malware)
setup.exe  (b03425041888bac8b6925437b186afdc)

0 / 68
setup.exe  (730e10e0306389425258674e463292b7)

0 / 68
setup.exe  (452f797dfb3143eb13dd455ce76ef961)

11 / 68    (PUP)
setup.exe  (609ac4bdd56789c77f03d1e2b8ca9666)

0 / 68
setup.exe  (16a0030788a9e911bf142fb8ded95d13)

0 / 68
advanced password setup.exe  (3f2ea67eb0db65abd72fbaf1dfc83651)

0 / 68
idman621build2.exe  (b1069a8d4986a7bdcee58991e760bcb0)

1 / 68
setup_art.exe  (cdb610ca2dfe823667599f6a4895e5c1)

0 / 68
b2a5d93f-b945-a562-ddc1-f805b06200b7_1d20f00ad8a87b2  (eea7a77fbabc5755a4119bd7814234d1)

0 / 68
a43b88d2-5564-0b6e-8f0b-756a7b403d3b_1d20f0091457b9a  (4e3fa346b1967aa6ee766b12e357f2f8)

0 / 68
3357fc90-0a3b-a99d-6e7b-ee4cf1060bf6_1d20f008077c8bd  (d54e0cfe87fac606bcd20fc74de3d477)

0 / 68
294dd36f-98d3-d6bb-f777-8f8debf1f7b4_1d20f006253bc72  (605de1b751d3642903d7be769a99f14c)

0 / 68
2387b802-7411-a008-3456-e3c9dcb1c525_1d20f008dab0948  (f9bbf11985a5fc0a4ff8f4562b8ff807)

1 / 68
setup.exe  (6b2cc71492478e0715d6f8b00238bfc1)

0 / 68
advanced password setup.exe  (d46236c0d8630da8361d299157e10c2e)

0 / 68
advanced password setup.exe  (bb10dd2f4c774e430df528b97d226fd4)

1 / 68
setup.exe  (a30ab16af6a4caf093c8b6789a2994be)

1 / 68
setup.exe  (a465969cee2dca30d28b8079a75dd457)

0 / 68
setup.exe  (227495685841add0b312c1a5883a3acf)

0 / 68
setup.exe  (cdf558ffaa5c202a5084cc198300d975)

2 / 68
setup.exe  (0f47b7cc597893b508373e0ecc211c15)

1 / 68
setup.exe  (53262d6a3b3410f4e442674a971f4d66)

11 / 68    (Malware)
setup.exe  (0ce6ea2355014252b0862051bb1f3f55)

0 / 68
setup.exe  (6849c0e94f8bfb4a2b4506519febd6a5)

0 / 68
setup.exe  (a564096e7fe466a7e4a5867bfb758d19)

0 / 68
esdpr.exe (ElcomSoft Distributed Password Recovery by ElcomSoft Co)  (a0f58409e35b88345a2c25cb5873bedd)

 
Latest 30 of 45 files

Downloads URLs for files signed by ElcomSoft Co.Ltd..

2 / 68      (inconclusive)
http://gsf-cf.softonic.com/8e2/388/.../file?SD_used=0&channel=WEB&fdh=no&id_file=50073&instance=softonic_en&type=PROGRAM&Expires=1472327498&Signature=JNfMUL3nWPtTWFspl~QLF62rv6h1Wuyk9FoEoAKTdvC~tiJzmocv2ZuAS5~niiXZac-jgyqeASbEc8G8f65YHhMzNHSnlzYrmS7w2q0eVZGBxYYudMGiXV-T~vZ3jcF-62p0haFSKWXuRzGZE5KrPY3UxibYq0XGItxX7Sgnsjc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=edpr_setup.exe  (f4baeffe62f78473804b2fc4d1defada)

3 / 68
http://s8262.chomikuj.pl/File.aspx?e=gXVdaa5d1pwduvxek2mECgKlLz4WOqvpo_jO3GTPcncHRmqqdG4GBOQ7wbtPDE_ePZ8aX3Pq0GW6Kvcd2fSiLq6eEJzL29DW6frGWXvj8lBCnKj45TlV9dzaGIlx-6m2dCOnNOiFl6_hDYBloVdhBmN2mD0aeUhthAouY9aCQ1k&pv=2  (setup.exe)

3 / 68
http://s8262.chomikuj.pl/File.aspx?e=gXVdaa5d1pwduvxek2mEChSm5mYFayb8PUPos8xKisVA53ugolH_IXlwVsjfu0wIrJVJabnQEBw0ycCcLuAxKkW88jDekBGk-fff4YJSYy7PpDNj9cGZpT0-0Zw-yMta8rHFjJrlyS0BsVAR-k1cViq3kYHTOQ3ng7Y_5A5VRzM&pv=2  (setup.exe)

3 / 68
http://s8262.chomikuj.pl/File.aspx?e=gXVdaa5d1pwduvxek2mECv3zntS99bxDBpyTYOTRmUFpmqfuouVpIbicFqiZVQPpzZmsiRc4K6XTJQvNMISq1tURRBCQLwSrmeutiZX8bl8HHWOmIrYO8iNARN7x49wuoWGtAk6IskAPD_kTN2ryLika_iKsPdpVt_MKRJvj4ww&pv=2  (setup.exe)

3 / 68
http://s10581.chomikuj.pl/File.aspx?e=gXVdaa5d1pwduvxek2mECsmoX8HmXYub3RM257g7kUFwlc5ZkJv1tGaDBAFiBCICzO1qytuAHS7BxFcCkRii8t-djVpp2ztmATfuk7m9jNflLSDucywFg5DRWzCTNVvEioSat76LGdbLYE5h-U_nUka9lokg5h_gbxNo0pw7IlU&pv=2  (setup.exe)

3 / 68
http://s10581.chomikuj.pl/File.aspx?e=gXVdaa5d1pwduvxek2mECn3gAZnDm_dfo_VX2veUv4LFmx0B0qYtX3NAaWY-ZsKri0sNxHBsrNA1-CaitXVWpQtSlu_kYWEnvf8HN6B_sCpIg_LfoLuRuyuj99TXnYU9r1hW37BrPVGqqkJprQ2CnRoXQcvPfukKyKHEs-0VIpg&pv=2  (setup.exe)

3 / 68
http://cfile8.uf.tistory.com/.../1458B24D4E2AE24502B3A9  (setup.exe)

3 / 68
http://2liter.tistory.com/.../cfile8.uf@1458B24D4E2AE24502B3A9.exe  (0f7d38daf6385c24f13973bb23424e20)

The following websites host and distribute files published by ElcomSoft Co.Ltd..

s8262.chomikuj.pl

s10581.chomikuj.pl

2liter.tistory.com

cfile8.uf.tistory.com

The certificates below are also signed by ElcomSoft Co.Ltd..

09C0CDCEEA0076B38C76210A92AD35CA  (Sep 22, 2009 to Sep 22, 2012)

76C04D7ECFE63D62BBE057B5375481F5  (Aug 17, 2006 to Sep 24, 2009)

31743A5CFEB1696D22C601A5C8C8BF47  (Aug 09, 2004 to Aug 09, 2005)

The following publishers (by Authenticode signature organization name) are related.

Bandisoft

Foxit Software Company

* Note, the details and description above are based on the code signing digital signature issued to ElcomSoft Co.Ltd. by VeriSign, Inc. on July 15, 2005 with the serial number '57afe5c6775e9eefc5c10a839682c12d'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.