Elgkoens.exe
Trangstilfldene4
BITT LLC
The file Elgkoens.exe by BITT has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from ewoodarcadegamesplayer.org.
Publisher:
Kjava (signed by BITT LLC)
MD5:
7c2727b284875fd1ba6d960c034957aa
SHA-1:
bd63dfcc21ec4ca9c3fdb58021672ee058f28cef
SHA-256:
7e50d46f50d04fc3c85158e3f324be000cda11e52496b262d6912e6a49fb27a7
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
5/26/2024 1:27:56 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
Adware.HPDefender.BITT.Meta (M)
16.5.27.18
File size:
545.3 KB (558,376 bytes)
Original file name:
Elgkoens.exe
Language:
English (United States)
Common path:
C:\users\{user}\downloads\3e60.tmp
Authority:
COMODO CA Limited
Valid from:
2/16/2016 7:00:00 PM
Valid to:
2/16/2017 6:59:59 PM
Subject:
CN="""BITT"" LLC", OU=IT, O="""BITT"" LLC", STREET="vul. Mykoly Vasylenka, 1", L=Kiev, S=Kiev, PostalCode=03113, C=UA
Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Serial number:
01D6FE72C352595E055CDACCE2E60893
The file Elgkoens.exe has been seen being distributed by the following URL.