6a5xle17.exe
OOO Kod-Intertainment
The file 6a5xle17.exe by OOO Kod-Intertainment has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from maintainpc.sendingupdates.net.
Publisher:
Astalavista (signed by OOO Kod-Intertainment)
Description:
Download Manager
MD5:
2d9287c7c96c091d49aaa8e983f81864
SHA-1:
4fd95831f43293775149b45895c621504e964024
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
12/25/2024 1:51:21 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.Amonetize.OOOKodIn (M)
16.3.27.21
File size:
50.7 KB (51,872 bytes)
Copyright:
Copyright © 2015
Original file name:
PreInstaller.NET.exe
Language:
Language Neutral
Common path:
C:\users\{user}\appdata\local\temp\6a5xle17.exe.part
Authority:
COMODO CA Limited
Valid from:
2/5/2016 5:30:00 AM
Valid to:
2/5/2017 5:29:59 AM
Subject:
CN=OOO Kod-Intertainment, O=OOO Kod-Intertainment, STREET="d. 9 str. 1 of. 36, Sukharevski M. per.", L=Moscow, S=Moscow, PostalCode=127051, C=RU
Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Serial number:
00CC0E842B9BEC5B956C956FBCB6FC721B
The file 6a5xle17.exe has been seen being distributed by the following URL.