home

Microsoft Windows

Publisher Information

Microsoft Windows is a software developer*. Thre are 30 additional code signing certificates issued to this publisher.
Authority:
Microsoft Windows

Valid from:
12/31/2011 11:30:00 PM

Valid to:
12/31/2014 11:30:00 PM

Subject:
CN=Microsoft Windows

Issuer:
CN=Microsoft Windows

Serial number:
5bb23983499b89a043a8103a67241378

Scanner detections:
Malware distribution  (70% detected)

Scan engine
Details
Detections

AVG
Generic_r, Luhe.Fiha.A, Generic_r.DBE.dropper
85.71%

McAfee
Trojan-FADF!6AE599109190, RDN/Generic.dx!c2y, Trojan-FADF!27790C50A6DD, Artemis!405B38F5C881
71.43%

avast!
Win32:Malware-gen, Win32:Agent-AMQZ [Drp]
71.43%

Kaspersky
Trojan.Win32.Scar, HEUR:Trojan.Win32.Generic
71.43%

Avira AntiVirus
TR/Crypt.XPACK.Gen, TR/Scar.AA, TR/Symmi.40824.1
71.43%

G Data
Gen:Variant.Graftor.70820, Win32.Trojan.Agent.GU6T4Z, Gen:Variant.Symmi.40824
71.43%

ESET NOD32
Win32/Sneepy (variant)
71.43%

IKARUS anti.virus
Trojan.Win32.Scar, Trojan.Win32.Agent, Trojan.Win32.Sneepy
71.43%

Qihoo 360 Security
HEUR/Malware.QVM06.Gen, HEUR/Malware.QVM10.Gen, HEUR/Malware.QVM18.Gen, Win32/Trojan.e0f
71.43%

MicroWorld eScan
Gen:Variant.Graftor.70820, Gen:Variant.Symmi.40824
57.14%

0 / 68
hustler-dec-2013.pdf.scr (Adobe PDF by Adobe)  (b8c1e32bf07f30a746ad0e80b4e77e3f)

0 / 68
fifa-2014.exe (Win32 Cabinet Self-Extractor by Microsoft)  (28361819866b3016e01369313aa744d8)

0 / 68
playboy.exe (Acrobat PDF Reader by Adobe)  (7db016c1d2ead1f40d78761cc9aacc6c)

1 / 68      (Malware)
rstrui_win.exe  (a1afd50c2da017693431f4f0b37225c1)

21 / 68    (Malware)
demopri.exe  (405b38f5c88169b10ad5c0273d5689f5)

12 / 68    (Malware)
fifa-fest.exe (Win32 Cabinet Self-Extractor by Microsoft)  (81a953408078d49a7af9ec3d273cc089)

24 / 68    (Malware)
pb02-2014-sample.pdf.scr (Adobe PDF by Adobe)  (27790c50a6ddc9b4835973f33d1d5371)

9 / 68      (Malware)
PLAYBO~1.EXE (Adobe PDF by Adobe)  (6ae599109190cfa66c5a9e020502276c)

29 / 68    (Malware)
WINSYS~1.EXE  (7075a90fee11fa594353a56849f63610)

17 / 68    (Malware)
playboy-022014-sample.exe (Win32 Cabinet Self-Extractor by Microsoft)  (258358d543ef8c7924a4656d690cab66)

The certificates below are also signed by Microsoft Windows.

1BE05C52E9F2F9E0C72A974DBB5801A4  (Apr 19, 2014 to Apr 19, 2044)

D01948B926A3A8884C5ACB045405408D  (Jul 29, 2015 to Jan 01, 2040)

CFBEA91AE351A4A74E69B28F1F496E97  (Jun 05, 2014 to Jan 01, 2040)

C635892F4C0869B448C2D01FCB490402  (Jun 08, 2014 to Jan 01, 2040)

56ACF3A199D0E1BF42A03806BE4C6EA3  (Jun 08, 2014 to Jan 01, 2040)

FD4790C44868CEB442FE25F4107EBBA9  (May 24, 2014 to Jan 01, 2040)

B9CD286295114A844B157EEB8C1DA8FC  (Oct 11, 2015 to Jan 01, 2040)

987CFC659D51528241C854E525BCBCDB  (Oct 28, 2013 to Jan 01, 2040)

C5144F378570DCAC44A70E8BC15E3EEA  (Jan 15, 2016 to Jan 01, 2040)

C39B4AAA1EDB93A54C8BF1E4D5259C29  (Oct 11, 2015 to Jan 01, 2040)

10 of 30 code signing certificates issued

* Note, the details and description above are based on the code signing digital signature issued to Microsoft Windows by Microsoft Windows on December 31, 2011 with the serial number '5bb23983499b89a043a8103a67241378'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.