home

ativador windows 8.exe

RemoveWaterMark

The application ativador windows 8.exe has been detected as a potentially unwanted program by 16 anti-malware scanners. This is a setup program which is used to install the application.
Product:
RemoveWaterMark

Version:
1.0.0.0

MD5:
f37e390862a22d28bd0112b9c350b767

SHA-1:
1feda8f7aa7a628e432a7b09b9c16e473472d1bb

SHA-256:
a8423de6ac003388591a66acbf3c8d7559698aaf55c0b1e128e1813ff31277ab

Scanner detections:
16 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 5:27:40 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.8238112
1040

avast!
Win32:PUP-gen [PUP]
2014.9-140401

Baidu Antivirus
Hacktool.Win32.Keygen
4.0.3.1441

Bitdefender
Trojan.Generic.8238112
1.0.20.455

Bkav FE
W32.Clodd0f.Trojan
1.3.0.4959

Emsisoft Anti-Malware
Trojan.Generic.8238112
8.14.04.01.09

F-Secure
Trojan.Generic.8238112
11.2014-01-04_3

G Data
Trojan.Generic.8238112
14.4.24

IKARUS anti.virus
VBS.Malware
t3scan.2.2.29

Malwarebytes
HackTool.Activator
v2014.04.01.09

McAfee
Artemis!F37E390862A2
5600.7174

MicroWorld eScan
Trojan.Generic.8238112
15.0.0.273

Norman
Suspicious_Gen4.BWZDE
11.20140401

nProtect
Trojan.Generic.8238112
14.03.27.01

Rising Antivirus
PE:Trojan.Win32.Generic.13F398DB!334731483
23.00.65.14330

VIPRE Antivirus
Trojan.Win32.Generic
27790

File size:
2.9 MB (3,009,024 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2012

Original file name:
RemoveWaterMark.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ativador windows 8.exe

File PE Metadata
Compilation timestamp:
10/29/2012 12:47:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:6LuXDYihrKIM5yXUU9FEzzmCSBqv9cziiyvuxz3nFtrr04kkMpRD2IcMLtrERE1i:6Luki5ZbUsEH1vcDJFtrqpp2yyl4s

Entry address:
0x2D763E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.8 MB (2,971,648 bytes)

The file ativador windows 8.exe has been seen being distributed by the following 7 URLs.

temp:Ativador W8 Definitivo.exe

ftp://177.43.179.186/JOSEMAR/Ativador Windows 8 by Lukas Winchester/.../Ativador Windows 8.exe

https://mega.nz/persistent/.../pVJw0QgZ

http://download2057.mediafire.com/nnzzr4pwb4bg/.../Ativador W8 Definitivo.exe

https://mega.nz/temporary/.../pVJw0QgZ

https://mega.nz/temporary/.../LpwAxTiD

https://mega.co.nz/temporary/.../tEwB3BwI

Remove ativador windows 8.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.