home

ativador_office_2010_definitivo_atualizado_2014_ph_downs_downloader-qeoxd1l3l.exe.zip

The file ativador_office_2010_definitivo_atualizado_2014_ph_downs_downloader-qeoxd1l3l.exe.zip has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from sub.reichtron.com.
MD5:
582c23a7b268c6720360b7441ce07da1

SHA-1:
994f952a6b8ec60abcb14b0478894eceeb12ce41

SHA-256:
6d6ee1ef628fca7a4b05589c900da3a870ae98647290dd88a8a5f2b9eb14059c

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 7:41:29 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Bundler.Meta (M)
16.6.22.17

File size:
380.4 KB (389,541 bytes)

Common path:
C:\users\{user}\downloads\ativador_office_2010_definitivo_atualizado_2014_ph_downs_downloader-qeoxd1l3l.exe.zip

The file ativador_office_2010_definitivo_atualizado_2014_ph_downs_downloader-qeoxd1l3l.exe.zip has been seen being distributed by the following URL.

http://sub.reichtron.com/QeOxd1l3La53acf508715372d3a72c357156d7f105HnOdh3Zeb8YToyOntzOjI6InRzIjtpOjE0MzUxOTIxNzI7czoxOiJmIjtzOjcyOiIvaG9tZS93d3cvYXNzZXRzL2JldHRlcl9pbnN0YWxsZXIvaW5zdGFsbGVycy9jbGkvc2V0dXBfMTQzNTE5MDUzMDg1OS5leGUiO30=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.