Categories: Malware

Application.Generic.3055988 information

The Application.Generic.3055988 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Generic.3055988 virus can do?

Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Authenticode signature is invalid
Network activity detected but not expressed in API logs

How to determine Application.Generic.3055988?


File Info:
name: 151B74472AA4934332E3.mlwpath: /opt/CAPEv2/storage/binaries/36ca07c0e2a08acf5b0d5847ff6f5f9b482ec54fd20aca476dc9babdc321d318crc32: 4B70163Emd5: 151b74472aa4934332e35a0d89c3b33csha1: 26da8aa2c57225eee4de9e53c9bd5d875002b1b6sha256: 36ca07c0e2a08acf5b0d5847ff6f5f9b482ec54fd20aca476dc9babdc321d318sha512: b65f2e6ee2198d101726e5224952b973432470d68ff5e5d1d310095ab50983b061c02357ca28fff49f78a5a63196f38bc908794c4ab53c5e5c4e633b29584c40ssdeep: 196608:2uURiq8rZjJprogGGzrbMTcsBjH9l6NSrSOhlkJ0A0n:2uUp8xJNJGGLMwsBjzE2nHntype: PE32+ executable (GUI) x86-64, for MS Windowstlsh: T1A07623BE21583368D01A8C745433BC88F1B2425E15FCD9AEB2DBB6C06B6F415E916F4Bsha3_384: 383d70db7ad6e224c7548a2947481abb02ce2fc71e774b1cdbf117fbd6d22e8c0446c93ed58d412576645cbdbf8fab63ep_bytes: 68c1851311e8d97d3a00225b6cba2352timestamp: 1970-01-01 00:00:00
Version Info:
CompanyName: MicrosoftВ® WindowsВ® Operating SystemFileTitle: rundllFileDescription: Windows host process (Rundll64)FileVersion: 10,0,19041,746LegalCopyright: В© Microsoft Corporation. All rights reserved.LegalTrademark: ProductName: Microsoft CorporationProductVersion: 10,0,19041,746Translation: 0x0409 0x04b0

Application.Generic.3055988 also known as:

Lionic	Trojan.Win64.Donut.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Application.Generic.3055988
FireEye	Generic.mg.151b74472aa49343
McAfee	BackDoor-FDOH!151B74472AA4
Cylance	Unsafe
Zillya	Trojan.Donut.Win64.458
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win64/Donut.b60ffc37
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.2c5722
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Packed.VMProtect.NF
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win64.Donut.cgl
BitDefender	Application.Generic.3055988
Avast	Win64:Malware-gen
Tencent	Win64.Trojan.Donut.Dvgd
Ad-Aware	Application.Generic.3055988
Emsisoft	Application.Generic.3055988 (B)
DrWeb	Trojan.DownLoader43.46603
TrendMicro	TROJ_GEN.R03BC0PJL21
McAfee-GW-Edition	BehavesLike.Win64.Drixed.wc
Sophos	Mal/Generic-R + Mal/VMProtBad-A
Ikarus	Trojan.Win64.Vmprotect
GData	Application.Generic.3055988
Avira	TR/Redcap.klpls
Gridinsoft	Ransom.Win64.Gen.sa
Arcabit	Application.Generic.D2EA174
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
VBA32	Trojan.Win64.Donut
ALYac	Application.Generic.3055988
MAX	malware (ai score=74)
Malwarebytes	Trojan.BitCoinMiner
TrendMicro-HouseCall	TROJ_GEN.R03BC0PJL21
Yandex	Trojan.Donut!r4NLq213aSQ
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	Malicious_Behavior.SB
AVG	Win64:Malware-gen
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_90% (W)
MaxSecure	Trojan.Malware.104277696.susgen