home

ativador_windows_7_definitivo_todas_as_versoes_32_64_bits_ph_downs_downloader-q33k2cyad.exe.zip

The file ativador_windows_7_definitivo_todas_as_versoes_32_64_bits_ph_downs_downloader-q33k2cyad.exe.zip has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from sub.reichtron.com.
MD5:
53410d7465a76d13d7d326ab8433b234

SHA-1:
932e140d24995e4dfd0093ad4893409c4e2c1f4f

SHA-256:
2b9cfac3e0277df408467e0641b5bb05021cc1264efe714e47d08a2a8311efcf

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 11:53:22 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Bundler.Meta (M)
16.6.22.17

File size:
380.4 KB (389,513 bytes)

Common path:
C:\users\{user}\downloads\ativador_windows_7_definitivo_todas_as_versoes_32_64_bits_ph_downs_downloader-q33k2cyad.exe.zip

The file ativador_windows_7_definitivo_todas_as_versoes_32_64_bits_ph_downs_downloader-q33k2cyad.exe.zip has been seen being distributed by the following URL.

http://sub.reichtron.com/Q33K2cYAde50d35fdf4992cf75006b974f1b403045lnTIseo8qXYToyOntzOjI6InRzIjtpOjE0MzQ2NTQyNzc7czoxOiJmIjtzOjcyOiIvaG9tZS93d3cvYXNzZXRzL2JldHRlcl9pbnN0YWxsZXIvaW5zdGFsbGVycy9jbGkvc2V0dXBfMTQzNDY1NDEzMzc3My5leGUiO30=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.