home

Refog Inc.

Publisher Information

Refog Inc. is a software publisher located in Alexandria, Virginia in the United States*. The publisher primarily developes software that can be classified as adware. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
Symantec Corporation

Valid from:
3/3/2016 4:00:00 PM

Valid to:
4/3/2018 4:59:59 PM

Subject:
CN=Refog Inc., O=Refog Inc., L=Alexandria, S=Virginia, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
50e9ecb0a3dd83dec773133a47225d97

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP (M)
100.00%

1 / 68      (PUP)
mpkl64.exe  (2e7c623ed2b43caedca74a68b001d2ed)

1 / 68      (PUP)
rfginst-59cf304w.exe  (2489dc3f8c1a04c96a9fd061d60d1622)

1 / 68      (PUP)
rfginst-fhqf9odh.exe  (183b633a8da74da32ffea24f4c7bbfe5)

1 / 68      (PUP)
mpkview.exe  (e9e1f3d36062e4afac0e35640a211e9d)

1 / 68      (PUP)
rfginst-l0pfotmf.exe  (acac370452d61d3f8e7dc38338660ef2)

1 / 68      (PUP)
mpk.dll  (d7049afa487969552c4a82fd015a677d)

1 / 68      (PUP)
mpk64.dll  (5880fcd7b4458a5136cd4e1062669dda)

1 / 68      (PUP)
mpk.exe  (c5bed03164fc99e024c07483c97885ab)

1 / 68      (PUP)
mpkhca.dll  (4c4b1446ac6fcefc331ea062fae7aeb8)

1 / 68      (PUP)
mpk.dll  (334e372fe4ecfc630f5e920838467a1c)

1 / 68      (PUP)
rfginst-4o8fdcre.exe  (277c784eae0b4e6ffefb238e6caceeb8)

1 / 68      (PUP)
rfginst-2e3fwovh.exe  (71a263ff55153ae2f7bd76ba07582706)

1 / 68      (PUP)
mpk64.dll  (521c9034090e5129ca3c0375aed2fe84)

1 / 68      (PUP)
f7e294fa-bc95-4030-94f1-a1be7355c20b.exe (Personal Monitor by Refog)  (48f3519b26561896efcf663aa93479af)

1 / 68      (PUP)
f7e294fa-bc95-4030-94f1-a1be7355c20b.tmp  (4983989579169e13f85680a6f8e30d83)

1 / 68      (PUP)
mpk.exe  (e5867b7e686b72ddceb89830ce4d83fd)

1 / 68      (PUP)
rfginst-a86fwuo8.exe  (9ce5a21d41a46f14491c52f436378a8e)

1 / 68      (PUP)
mpkview.exe  (7ae602956b875df78603c05cc1528796)

1 / 68      (PUP)
59a9030e-a53c-4bd1-8bcd-e5cc1c4ecea4.tmp  (b1bd249a72e6804e25bdb09f2a4cc49c)

1 / 68      (PUP)
44f18f5e-8636-46e3-97d1-d34e574dba7e.exe (Employee Monitor by Refog)  (1acf994269c144cf8d04108993839007)

1 / 68      (PUP)
rfginst-qgof3qwj.exe  (a20fcc0e60b1a656dd7a55ed65a3f058)

1 / 68      (PUP)
68d80355-ac9d-4f91-895a-297d295bacac.exe (REFOG Free Keylogger by Refog)  (870a2f3980b5411902efd64c48dc8438)

1 / 68      (PUP)
8d025bb9-da67-40d3-8b0c-402968c48356.tmp  (e75ed9cf95e7644ccd6f3c32cc54afdb)

1 / 68      (PUP)
mpkhca.dll  (de3ac25214752a71e666c1b7e19e5a4f)

1 / 68      (PUP)
lnkmst.exe  (6e6936db7a84fba6c8d90eb6cd90fbd4)

1 / 68      (PUP)
mpkhca.dll  (1b4f5c56cdc5bc9bf4862b4edf0136e9)

1 / 68      (PUP)
eae39b5dc84dd6cf794ecf0e110d6f3d21d23706  (fb1f4da024333ed4464874558c8fd8af)

1 / 68      (PUP)
mpk_emni_rfg_2750.exe (Employee Monitor by Refog)  (1dc61d46c101031ab7daf7b889e8d298)

1 / 68      (PUP)
mpkl64.exe  (69a31bbf0808b451b4cee46abdf3e1a2)

1 / 68      (PUP)
mpkhca.dll  (dbe06fb50069b3e0d7e19162cf0223be)

 
Latest 30 of 144 files

Downloads URLs for files signed by Refog Inc..

1 / 68      (PUP)
https://login.refog.com/api/.../download?pid=rkl&ver=8.7.0.2750&sn=1  (rfginst-59cf304w.exe)

1 / 68      (PUP)
https://login.refog.com/api/.../download?pid=rkf&ver=8.7.0.2750&sn=5  (rfginst-fhqf9odh.exe)

1 / 68      (PUP)
https://login.refog.com/api/.../download?pid=rkl&ver=8.7.1.2770&sn=1  (rfginst-2e3fwovh.exe)

1 / 68      (PUP)
https://login.refog.com/api/.../download?pid=rkf&ver=8.7.0.2750&sn=5  (rfginst-s83f95eo.exe)

1 / 68      (PUP)
https://login.refog.com/api/.../download?pid=rpm&ver=8.7.0.2750&sn=2  (rfginst-fokfnuny.exe)

1 / 68      (PUP)
https://login.refog.com/api/.../download?pid=rem&ver=8.7.0.2750&sn=3  (rfginst-vc1ff1d6.exe)

The certificates below are also signed by Refog Inc..

7FF3DAF8E8B0D4A05A226B85F1054E87  (Feb 03, 2013 to Mar 05, 2016)

1FC4489003E01028139915C2D888675C  (Dec 11, 2011 to Feb 05, 2013)

2C65F10795394990A2209CE7972CFBAC  (Feb 06, 2010 to Feb 07, 2012)

* Note, the details and description above are based on the code signing digital signature issued to Refog Inc. by Symantec Corporation on March 03, 2016 with the serial number '50e9ecb0a3dd83dec773133a47225d97'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.