home

removewat v2.2.8 windows 8.1 permanent activator free download.exe

The application removewat v2.2.8 windows 8.1 permanent activator free download.exe has been detected as a potentially unwanted program by 30 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from doc-0s-5o-docs.googleusercontent.com.
MD5:
7599fb15e50286eb788f4f657fa7fce4

SHA-1:
ff8db79d2bbbf2fe2df8955b0eb83ba7278347b1

SHA-256:
50bad6fed86a3984c03a177ff62f118a33f86c598c42efe0e47f7ea28aaabbec

Scanner detections:
30 / 68

Status:
Potentially unwanted

Analysis date:
12/27/2024 4:11:08 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.MPlug.16
5751526

AhnLab V3 Security
PUP/Win32.Generic
2015.10.13

Avira AntiVirus
ADWARE/MultiPlug.Gen7
8.3.2.2

Arcabit
Trojan.Adware.MPlug.16
1.0.0.582

avast!
Win32:FakeDownload-G [PUP]
151004-0

AVG
Adware Generic_r.VD
2015.0.4435

Baidu Antivirus
Adware.Win32.MultiPlug
4.0.3.151013

Bitdefender
Gen:Variant.Adware.MPlug.16
1.0.20.1430

Comodo Security
Application.Win32.Multiplug.CT
23407

Dr.Web
Trojan.DownLoader11.38465
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Adware.MPlug.16
10.0.0.5366

ESET NOD32
Win32/AdWare.MultiPlug.CT application
7.0.302.0

Fortinet FortiGate
Adware/MultiPlug
10/13/2015

F-Prot
W32/S-a45e7af1
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.MPlug
5.14.151

G Data
Gen:Variant.Adware.MPlug.16
15.10.25

K7 AntiVirus
Unwanted-Program
13.210.17516

Kaspersky
not-a-virus:HEUR:AdWare.Win32.MultiPlug
15.0.0.543

Malwarebytes
PUP.Optional.MultiPlug
v2015.10.13.01

McAfee
Program.MultiPlug-FRO
18.0.204.0

MicroWorld eScan
Gen:Variant.Adware.MPlug.16
16.0.0.858

NANO AntiVirus
Riskware.Win32.MultiPlug.dfjscb
0.30.26.3947

Norman
Gen:Variant.Adware.MPlug.16
10.10.2015 03:41:45

Panda Antivirus
Trj/Genetic.gen
15.10.13.01

Quick Heal
Adware.MultiPlug.GN5
10.15.14.00

Rising Antivirus
PE:Adware.MultiPlug!1.A126[F1]
23.00.65.151011

Sophos
PUA 'MultiPlug' (of type Adware)
5.15

Vba32 AntiVirus
SScope.Adware.MultiPlug
3.12.26.4

VIPRE Antivirus
Threat.5085665
43798

Zillya! Antivirus
Adware.MultiPlugGen.Win32.28
2.0.0.2444

File size:
872.5 KB (893,440 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\removewat v2.2.8 windows 8.1 permanent activator free download.exe

File PE Metadata
Compilation timestamp:
8/26/2012 11:56:59 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:WatPLPLAiZmehmyWGWLkAJqVc4Zgr/L7pA:7hAq/Ayu2VcDLNA

Entry address:
0x2AA36

Entry point:
E8, 78, 48, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 90, B2, 44, 00, E8, E4, 0F, 00, 00, E8, 45, 4A, 00, 00, 0F, B7, F0, 6A, 02, E8, 0B, 48, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, D6, 08, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
203 KB (207,872 bytes)

The file removewat v2.2.8 windows 8.1 permanent activator free download.exe has been seen being distributed by the following URL.

https://doc-0s-5o-docs.googleusercontent.com/docs/securesc/k2d7nh8a6k2d9qhbmpgf3pn64m883i83/5eolb6q3shsqb0jtdooktpjlm1hrrctj/1444737600000/.../15744178736764526796/0B7a-MvQQPTm4SnZ3RG1uOFFhbEU?e=download

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.