home

ativador_w7_chew_wga_v0_9__downloader-qcfwlvaul.exe.zip

The file ativador_w7_chew_wga_v0_9__downloader-qcfwlvaul.exe.zip has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from sub.reichtron.com.
MD5:
04ce79b1aa3ad3d2efee7132a5c887e6

SHA-1:
45dc74c3f30fc9fa1121632835bb4359a71b98a1

SHA-256:
3691c6c1583ba572d8988947d078ff28f0b89933e0480e904e1c282a32de258e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/16/2024 9:29:39 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Bundler.Meta (M)
16.6.22.17

File size:
380.3 KB (389,428 bytes)

Common path:
C:\users\{user}\downloads\ativador_w7_chew_wga_v0_9__downloader-qcfwlvaul.exe.zip

The file ativador_w7_chew_wga_v0_9__downloader-qcfwlvaul.exe.zip has been seen being distributed by the following URL.

http://sub.reichtron.com/QcFWLvaUL41ccb21ef064f9d0583f42b0fede572b5NxZNyI6pVcYToyOntzOjI6InRzIjtpOjE0MzQ2NTUwMDQ7czoxOiJmIjtzOjcyOiIvaG9tZS93d3cvYXNzZXRzL2JldHRlcl9pbnN0YWxsZXIvaW5zdGFsbGVycy9jbGkvc2V0dXBfMTQzNDY1NDE0MzExNy5leGUiO30=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.