optin.php

KNCTR

Itibiti Ventures Inc.

The file optin.php, “KNCTR Setup ” by Itibiti Ventures has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Itibiti Inc.   (signed by Itibiti Ventures Inc.)

Product:
KNCTR

Description:
KNCTR Setup

MD5:
ac1704f569f891b7a4d8174f3281ec2c

SHA-1:
0da105cc99db0854e42b4381af82b2a1f7c25dfe

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/25/2024 2:52:03 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Itibiti.KNCTR.Optional.Installer.Meta (L)
16.6.27.2

File size:
4.2 MB (4,435,424 bytes)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\optin.php

Digital Signature
Authority:
COMODO CA Limited

Valid from:
3/8/2016 4:00:00 PM

Valid to:
3/9/2021 3:59:59 PM

Subject:
CN=Itibiti Ventures Inc., O=Itibiti Ventures Inc., STREET=5075 Yonge Street, STREET=Suite 400, L=Toronto, S=Ontario, PostalCode=M2N6C6, C=CA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7EC25411031970DBC544087062688A93

Remove optin.php - Powered by Reason Core Security