home

windows_server_2012_r2_stardard_1_torrent_downloader-q4pwazxrh.exe.zip

The file windows_server_2012_r2_stardard_1_torrent_downloader-q4pwazxrh.exe.zip has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from sub.reichtron.com.
MD5:
e4afdb9fb4b2b966dca71f0d6c6e4fe0

SHA-1:
039a418ea462e6f88338078809d93e76a06dd2b4

SHA-256:
9d411194950f467797a679c0e3a4c67f82d5df98c6639a0f04ace34445772a72

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/3/2024 1:50:49 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Bundler (M)
16.8.9.11

File size:
380.4 KB (389,520 bytes)

Common path:
C:\users\{user}\downloads\windows_server_2012_r2_stardard_1_torrent_downloader-q4pwazxrh.exe.zip

The file windows_server_2012_r2_stardard_1_torrent_downloader-q4pwazxrh.exe.zip has been seen being distributed by the following URL.

http://sub.reichtron.com/Q4pwAZXRH3d3b21d54f25b3bc45accc76b4a1219c5of80nJhAZIYToyOntzOjI6InRzIjtpOjE0MzUxNzY5Mzg7czoxOiJmIjtzOjcyOiIvaG9tZS93d3cvYXNzZXRzL2JldHRlcl9pbnN0YWxsZXIvaW5zdGFsbGVycy9jbGkvc2V0dXBfMTQzNTE3NjIwNDY0NC5leGUiO30=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.