hltv.exe
It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Umyqnaokq’. The file has been seen being downloaded from www.grabconceptsquick.com.
MD5:
055e96aa9594edb66083d04cc1cbad1f
SHA-1:
3d38ae07103893c1b7175450c07a0dcd6d992f01
SHA-256:
ee961e92ad4f21f2180e880c05620c4c651170bd8d906a75b56b3b3f3c2d4182
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Analysis date:
5/6/2024 12:20:02 PM UTC (today)
File size:
216 KB (221,184 bytes)
File type:
Executable application (Win64 EXE)
Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\hltv.exe
CLSIDs:
{1D6322AD-AA85-4EF5-A828-86D71067D145}, {4C1FC63A-695C-47E8-A339-1A194BE3D0B8}, {641ABA69-56FD-4029-A445-4D8375D3A699}, {812F944A-C5C8-4CD9-B0A6-B3DA802F228D}, {84302F97-7F7B-4040-B190-72AC9D18E420}, {8A9B1CDD-FCD7-419c-8B44-42FD17DB1887}
Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Command:
C:\users\{user}\appdata\roaming\lukub\foid.exe
The file hltv.exe has been discovered within the following programs.
www.cyberoam.com
About 6% of users remove it
www.naturalselection2.com
About 8% of users remove it
Powered by Should I Remove It?
The file hltv.exe has been seen being distributed by the following URL.