avg internet security 2015 serial keys are here ! [latest].exe

Stepan Rybin

The is the installer for the WebPick InstalleRex download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed without consent. The application avg internet security 2015 serial keys are here ! [latest].exe by Stepan Rybin has been detected as adware by 26 anti-malware scanners. It is built using the Crossrider cross-browser extension platform. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Publisher:
Stepan Rybin  (signed and verified)

MD5:
63499abf28d8f0dc7b080591e384fe62

SHA-1:
e848d2bcac6dcabcd62d523d5fa805555b7be84c

SHA-256:
57ad97d020d8f5e90f9558a92b030428e5cd03007cdd41e50af9bac5b1e77d9b

Scanner detections:
26 / 68

Status:
Adware

Explanation:
The software may change the browser's home page and search provider settings as well as display advertisements.

Analysis date:
4/25/2024 12:28:24 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Mikey.8516
6236936

AhnLab V3 Security
PUP/Win32.MultiPlug
2015.04.01

avast!
Win32:MultiPlug-TP [PUP]
150319-1

AVG
Adware Generic_r.AAD
2014.0.4311

Bitdefender
Gen:Variant.Adware.Mikey.8516
1.0.20.455

Bkav FE
W32.HfsAdware
1.3.0.6379

Comodo Security
Application.Win32.AdWare.MultiPlug.VA
21608

Dr.Web
Trojan.Crossrider1.22656
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Adware.Mikey.8516
9.0.0.4799

ESET NOD32
Win32/Adware.MultiPlug.FK application
7.0.302.0

Fortinet FortiGate
Riskware/MultiPlug
4/1/2015

F-Prot
W32/MultiPlug.H.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Mikey
5.13.68

G Data
Gen:Variant.Adware.Mikey.8516
15.4.25

K7 AntiVirus
Unwanted-Program
13.202.15449

Kaspersky
not-a-virus:AdWare.Win32.MultiPlug
15.0.0.543

Malwarebytes
PUP.Optional.Unizeto
v2015.04.01.07

McAfee
Program.MultiPlug-FWG
16.8.708.2

MicroWorld eScan
Gen:Variant.Adware.Mikey.8516
16.0.0.273

NANO AntiVirus
Riskware.Win32.MultiPlug.doxbxf
0.30.8.659

Reason Heuristics
PUP.WebPick
15.4.1.7

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
23.00.65.15330

Sophos
MultiPlug
4.98

Vba32 AntiVirus
SScope.Adware.MultiPlug
3.12.26.3

Zillya! Antivirus
Adware.MultiPlug.Win32.228753
2.0.0.2123

File size:
1023.2 KB (1,047,752 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\{93e9e26e-d521-4153-93e9-9e26ed5289bb}\avg internet security 2015 serial keys are here ! [latest].exe

Digital Signature
Signed by:

Authority:
Unizeto Technologies S.A.

Valid from:
6/27/2014 11:37:40 AM

Valid to:
6/27/2015 11:37:40 AM

Subject:
E=rybin.step@yandex.ru, CN=Stepan Rybin, O=Stepan Rybin, C=UA

Issuer:
CN=Certum Code Signing CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
47154C2151E9EB8DFA42C2C9E45BFC6C

File PE Metadata
Compilation timestamp:
7/31/2013 3:34:54 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:UGc1pWk5AWv7KiwRLgZA4VY2ICHnQ1ke+FLudnXJ:Uz1p9v7ANNCHkkHFSdn5

Entry address:
0xD8282

Entry point:
E8, DF, 14, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 30, AE, 4E, 00, E8, E8, 19, 00, 00, E8, AC, 16, 00, 00, 0F, B7, F0, 6A, 02, E8, 72, 14, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, E8, 02, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
7.3832

Code size:
883.5 KB (904,704 bytes)