# Trojan's detected by ESET when extracting the contents of Kibana 8.16.1 for Windows

**URL:** <https://discuss.elastic.co/t/trojans-detected-by-eset-when-extracting-the-contents-of-kibana-8-16-1-for-windows/371896>\
**Category:** Kibana\
**Created:** [December 12, 2024, 8:07am UTC](https://discuss.elastic.co/t/trojans-detected-by-eset-when-extracting-the-contents-of-kibana-8-16-1-for-windows/371896 "2024-12-12T08:07:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tomaz\_Ogris](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tomaz_ogris/32/139956_2.png) [@Tomaz\_Ogris](https://discuss.elastic.co/u/Tomaz_Ogris)\
**Post date:** [December 12, 2024, 8:07am UTC](https://discuss.elastic.co/t/trojans-detected-by-eset-when-extracting-the-contents-of-kibana-8-16-1-for-windows/371896/1 "2024-12-12T08:07:22Z")

</div>

I have downloaded the latest Kibana for Windows from the official webpage: [Download Kibana Free | Get Started Now | Elastic](https://www.elastic.co/downloads/kibana).

When extracting the contents of the downloaded archive kibana-8.16.1-windows-x86\_64.zip, ESET have detected and cleaned, removed the following:  
\kibana-8.16.1\node\_modules@kbn\elastic-assistant-plugin\server\knowledge\_base\security\_labs\cuba\_ransomware\_malware\_analysis.md;Win32/Filecoder.Cuba trojan;Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe (9518C39C71AF3CC77D7BBB1381160497778C3429).;137FF203AA79DFA4EA029ED5B746E816EB12300D;12. 12. 2024 08:37:53

\kibana-8.16.1\node\_modules@kbn\elastic-assistant-plugin\server\knowledge\_base\security\_labs\siestagraph\_new\_implant\_uncovered\_in\_asean\_member\_foreign\_ministry.md;ASP/Webshell.CX trojan;cleaned by deleting;Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe (9518C39C71AF3CC77D7BBB1381160497778C3429).;E2365CCC95148043B0F420B8B4707D12AC049B6A;12. 12. 2024 08:37:53

Any clues if this are false positives or something fishy is going on?

Thank you for any insights.

---

<div class="post-metadata">

**Author:** ![sholzhauer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sholzhauer/32/110282_2.png) [@sholzhauer](https://discuss.elastic.co/u/sholzhauer)\
**Post date:** [December 12, 2024, 1:58pm UTC](https://discuss.elastic.co/t/trojans-detected-by-eset-when-extracting-the-contents-of-kibana-8-16-1-for-windows/371896/2 "2024-12-12T13:58:54Z")

</div>

Hi, there is a [github issue](https://github.com/elastic/kibana/issues/202114) for this.  
And [a discussion on the community slack](https://elasticstack.slack.com/archives/CRGSUQC20/p1733300303813349)