home

SevenWatermarkChanger.exe

SevenWatermarkChanger

This is a setup program which is used to install the application. The file has been seen being downloaded from download1849.mediafire.com and multiple other hosts.
Product:
SevenWatermarkChanger

Version:
1.0.0.0

MD5:
356c324ab0b64c37b9901005a32dda2c

SHA-1:
af6160578b8b8ac6348c379a2d17ff20757f6558

SHA-256:
68b1d3b89db3dc502eb2638bfd5866ff5fe375fb08c2d03ee5fe4f732acbd59e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:04:46 PM UTC  (today)

File size:
745 KB (762,880 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2010

Original file name:
SevenWatermarkChanger.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\sevenwatermarkchanger.exe

File PE Metadata
Compilation timestamp:
1/25/2010 11:54:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:nGh0/0QxGeHTytuZTl0BkdQPzJGh0/0QxGeHTytuZTl0BkdQPz:NdWutC62/dWutC62

Entry address:
0x60FDE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B3, A2, 5D, 4B, 00, 00, 00, 00, 02, 00, 00, 00, 8F, 00, 00, 00, 1C, 20, 06, 00, 1C, F4, 05, 00, 52, 53, 44, 53, C9, DA, DC, 65, E8, 93, 6F, 47, AA, ED, 58, 2A, 53, C7, CD, 51, 01, 00, 00, 00, 49, 3A, 5C, 46, 69, 6C, 65, 73, 5C, 56, 69, 73, 75, 61, 6C, 20, 53, 74, 75, 64, 69, 6F, 20, 32, 30, 30, 38, 5C, 50, 72, 6F, 6A, 65, 63, 74, 73, 5C, 53, 65, 76, 65, 6E...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
380 KB (389,120 bytes)

The file SevenWatermarkChanger.exe has been seen being distributed by the following 2 URLs.

http://download1849.mediafire.com/3vljy8l9u4cg/.../SevenWatermarkChanger.exe

http://download962.mediafire.com/irfkpef89axg/.../SevenWatermarkChanger.exe

Scan SevenWatermarkChanger.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.