beejdajgia.exe

STarT PlAyiNg

Part of the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The application beejdajgia.exe by STarT PlAyiNg has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is also typically executed from the user's temporary directory.
Publisher:
STarT PlAyiNg  (signed and verified)

MD5:
37bdd9d611271ddaec9cd866a02e0f03

SHA-1:
5de5c0e9563b0a06cf3faab23334f4930ce9cd6b

SHA-256:
c10e3e201d6dbf7ae890db32cdebf619b96f7ce09a3cc610417a50d45d9cd743

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/25/2024 1:29:54 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Outbrowse (M)
17.3.3.1

File size:
635 KB (650,272 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\beejdajgia.exe

Digital Signature
Signed by:

Authority:
thawte, Inc.

Valid from:
11/9/2015 4:00:00 PM

Valid to:
12/11/2015 3:59:59 PM

Subject:
CN=STarT PlAyiNg, O=STarT PlAyiNg, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
67031F394933BB388A0F88D207E74D97

File PE Metadata
Compilation timestamp:
12/5/2015 2:00:52 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x5CB1D

Entry point:
E8, 16, B6, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 83, EC, 18, 53, 8B, 5D, 0C, 56, 57, C6, 45, FF, 00, 8B, 7B, 08, 8D, 73, 10, 33, 3D, 90, 72, 49, 00, C7, 45, F4, 01, 00, 00, 00, 8B, 07, 83, F8, FE, 74, 0D, 8B, 4F, 04, 03, CE, 33, 0C, 30, E8, F6, AE, FF, FF, 8B, 47, 08, 8B, 4F, 0C, 03, CE, 33, 0C, 30, E8, E6, AE, FF, FF, 8B, 45, 08, F6, 40, 04, 66, 0F, 85, CF, 00, 00, 00, 89, 45, E8, 8B, 45, 10, 89, 45, EC, 8D, 45, E8, 89, 43, FC, 8B, 43, 0C, 89, 45, F8, 83, F8, FE, 0F...
 
[+]

Entropy:
6.2652

Code size:
489 KB (500,736 bytes)

Remove beejdajgia.exe - Powered by Reason Core Security