home

Forensic Software Limited

Publisher Information

Forensic Software Limited is a software developer located in Send, Surrey in United Kingdom*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
9/26/2011 1:00:00 AM

Valid to:
10/1/2012 12:59:59 AM

Subject:
CN=Forensic Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Forensic Software Limited, L=Send, S=Surrey, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7f9f2ef64b019649b199000cd761eab8

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

herdProtect (fuzzy)
a variant of f80566d59338ecb1d6c8250b504c63ca719effbd
100.00%

Comodo Security
TrojWare.Win32.Kryptik.~NT
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

McAfee
Artemis!A08F361B3207
100.00%

ESET NOD32
Win32/RiskWare.PEMalform
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.179A99E0!396007904
100.00%

Fortinet FortiGate
W32/Onlinegames.ASE!tr
100.00%

AVG
Win32/Heur
100.00%

Baidu Antivirus
Trojan.Win32.PEMalform
100.00%

0 / 68
extrac32.exe (Microsoft Windows 2000 Operating System by Microsoft)  (c9570f63278d3b4ac5cae2a1df8bd4e1)

0 / 68
PCClient.exe (Policy Central Enterprise by Forensic Software)  (9576ef9e71ed357c017b2d28a5fe07a8)

0 / 68
sysmonp32.exe  (40f1ff3545d9b692df7c1720816851ca)

0 / 68
SysServer.EXE (Policy Central Enterprise by Forensic Software)  (12904186661d5228e009e476825a41e2)

0 / 68
funcserver_x86.exe  (c28c6c317a509f19db23bec6e0caff68)

0 / 68
funcserver_x64.exe  (bd8a376a30b17b4989426b5ab4bb8620)

0 / 68
fslpce64drv.sys  (08180314d7dc9abb94c6a682729c9edb)

0 / 68
fslclientinfo.exe  (08fb404ca435d0245be9de208597183e)

0 / 68
extrac32.exe (Microsoft Windows 2000 Operating System by Microsoft)  (6c36cbed5ab2dae54d876db742a24a19)

0 / 68
appswch64.dll  (465b01b7c1b5fea06547458f008246f2)

0 / 68
kg32cs.dll (Cyberage kg32cs by Cyberage)  (6edae7ab5d84a355168cff08eabb4b5e)

0 / 68
profile32.dll  (caef50b4d1090230e212c827aa7dfc4b)

0 / 68
infilter32.dll  (d08e6b2884d9ce2a09ef0ebdf294c385)

0 / 68
sysappp32.dll  (4b79a56ffdade8fcde19591edc272e30)

0 / 68
kg64cs.dll (Cyberage kg32cs by Cyberage)  (706d2a5b62443040f27b3cb03dd89365)

0 / 68
sysappp64.dll  (b9878e61f18b281ba4660070a2a2ad31)

0 / 68
profile64.dll  (2beb78a1109e69bde2ee515aed283e91)

0 / 68
infilter64.dll  (0fe5af085c02932084f66620d6d4b2f9)

0 / 68
PCClient.exe (Policy Central Enterprise by Forensic Software)  (66c13a6ca4b3f08576d9d5af4acd62a1)

0 / 68
SysServer.EXE (Policy Central Enterprise by Forensic Software)  (9f00c408af70d7419ff48ce0f7584100)

0 / 68
sysmonp32.exe  (a1f72c327c0e600750c5642207b8647d)

0 / 68
PCClient.exe (Policy Central Enterprise by Forensic Software)  (fb1881ce66c8fc635afa47253505029e)

0 / 68
sysmonp32.exe  (543c3389cc4c24f70bb9fa2ab064a11d)

0 / 68
SysServer.EXE (Policy Central Enterprise by Forensic Software)  (be69ba65acdaa77c6e78006e229b18b6)

0 / 68
extrac32.exe (Microsoft Windows 2000 Operating System by Microsoft)  (6de409c02246ec0e4046ee7a3e5eee53)

0 / 68
Setup.exe (InstallShield by Macrovision)  (09bdadd5a1c88a1ee2ac012d174b9099)

9 / 68      (Malware)
issetup.dll (InstallShield by Macrovision)  (b7170c266e6de60b251bbe60175f417b)

0 / 68
extrac32.exe (Microsoft Windows 2000 Operating System by Microsoft)  (1d86b429a155a8117de9a729a0408e67)

0 / 68
hlpr.dll (Policy Central Enterprise by Forensic Software)  (ab27f45fbaa921e9619c3552c0b0ff86)

The certificates below are also signed by Forensic Software Limited.

095E9C7DD190B2FC06392E0C254D5E35  (Oct 05, 2012 to Dec 09, 2013)

0FE4AB257198C21A057BA14AEA8A0ADD  (Oct 01, 2010 to Oct 02, 2011)

00913651B3B739F16092EC3D5FC3F1EF38  (Mar 12, 2010 to Mar 12, 2011)

* Note, the details and description above are based on the code signing digital signature issued to Forensic Software Limited by VeriSign, Inc. on September 26, 2011 with the serial number '7f9f2ef64b019649b199000cd761eab8'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.