kmspicovactivadordewindowsyoffice__15022_i1613584406_il1881835.exe.rar
The file kmspicovactivadordewindowsyoffice__15022_i1613584406_il1881835.exe.rar has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from guardveteran.com.
File name:
kmspicovactivadordewindowsyoffice__15022_i1613584406_il1881835.exe.rar
MD5:
d6755ced2c56d099e21c73f202b711e6
SHA-1:
89c6113a86e8e513e0502a141576bf9d736f1a8a
SHA-256:
76e8b494483fe2e738e84c2ace2b52c8eaeaea42dff55c3b36b8271902e06581
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
5/18/2024 4:47:12 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
Adware.Amonetize (M)
16.7.24.7
File size:
669 KB (685,014 bytes)
Common path:
C:\users\{user}\downloads\kmspicovactivadordewindowsyoffice__15022_i1613584406_il1881835.exe.rar
The file kmspicovactivadordewindowsyoffice__15022_i1613584406_il1881835.exe.rar has been seen being distributed by the following URL.