home

msl-8560-18

APPsolute Technology Inc.

The file msl-8560-18 by APPsolute Technology has been detected as a potentially unwanted program by 6 anti-malware scanners.
Publisher:
WeWatcher  (signed by APPsolute Technology Inc.)

Product:
WeWatcher

Version:
2.3.6.0

MD5:
e6e42bfcf3b833c9e43bd52f3ba29f56

SHA-1:
7888344e55a4bc605cfdef6b5ff9b09fa0e776b5

Scanner detections:
6 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 4:16:42 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.2913

Bkav FE
W32.HfsAdware
1.3.0.7237

Dr.Web
Adware.Superfish.227
9.0.1.0331

Malwarebytes
Rootkit.WeWatcher.PUP
v2015.11.27.08

Reason Heuristics
PUP.APPsoluteTechnology (M)
15.11.27.8

VIPRE Antivirus
APPsoluteTechnology
44706

File size:
27.2 KB (27,864 bytes)

Product version:
2.3.6.0

Copyright:
Copyright ® WeWatcher All rights reserved

Original file name:
WeWatcher

Language:
Language Neutral

Common path:
C:\windows\temp\msl-8560-18

Digital Signature
Signed by:
APPsolute Technology Inc.

Authority:
Symantec Corporation

Valid from:
2/10/2015 4:00:00 PM

Valid to:
2/11/2016 3:59:59 PM

Subject:
CN=APPsolute Technology Inc., O=APPsolute Technology Inc., L=Marshfield, S=Wisconsin, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3D511A783C926067341FAC786A6CAF35

File PE Metadata
Compilation timestamp:
8/13/2015 2:15:46 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
384:iCAQFGSwG7zx12nW9wJeR2Bny+b66LDyyyqMGp2GyRMvpNhnYPLkR7:iyInWPoU+bhLMGtAMvpBR

Entry address:
0x46B6

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, 40, FF, FF, FF, 4C, 6F, 67, 20, 61, 63, 74, 69, 76, 65, 0D, 0A, 00, CC, FC, 46, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 7E, 4C, 00, 00, 80, 3F, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, E8, 47, 00, 00, 00, 48, 00, 00, 0A, 48, 00, 00, 1E, 48, 00, 00, 3A, 48, 00, 00, 52, 48, 00, 00, 6A, 48, 00, 00, 88, 48, 00, 00, A4, 48, 00, 00, BE, 48, 00, 00, D0, 48, 00, 00, E8, 48, 00, 00, F8, 48, 00, 00, 10, 49, 00, 00, 22, 49...
 
[+]

Entropy:
6.7052

Code size:
16.5 KB (16,896 bytes)

Remove msl-8560-18 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.