Categories: Malware

Application.Generic.3112431 malicious file

The Application.Generic.3112431 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Generic.3112431 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Guard pages use detected – possible anti-debugging.
A process attempted to delay the analysis task.
Dynamic (imported) function loading detected
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Uses Windows utilities to enumerate running processes
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Uses Windows utilities for basic functionality
Uses suspicious command line tools or Windows utilities

How to determine Application.Generic.3112431?


File Info:
name: 1C6112EB9F217C70F3A7.mlwpath: /opt/CAPEv2/storage/binaries/c17548ad3b63040a05b215325ecad0b0d725db14094a34e6a8e8a76cf2fe9dd1crc32: F6783F9Dmd5: 1c6112eb9f217c70f3a75a928660e148sha1: b97e3c24767c13cccdf1bd26732b597e84e06438sha256: c17548ad3b63040a05b215325ecad0b0d725db14094a34e6a8e8a76cf2fe9dd1sha512: 8548c2491b68386a60b0cc9dcce3dd66085cc3143be2eadf93edec2229d802ae5a872cb877cae1df98e2846f1e55d907665de2966879f3e2ecaac5df8c1e8bc6ssdeep: 6144:YjT5Zh17eWxoG/+ov/2OIQ4wW3OBsQetW7W6bpbdLPwOz:YRZ+IoG/n9IQxW3OBsFWW6bpbqMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T16664AF01BAD55471E6B21E311A79AA20593FB8200F38CA9F93DC495D9B735C0EB31BB7sha3_384: 0d5714519f5cd5434d93ab9e81bc9b569adb0fbe6fbd0efbe25b4ef40a3fe7b49ed2bc704d3db41d715189afb59f9c02ep_bytes: e874040000e988feffff3b0d68e64300timestamp: 2020-11-12 11:48:44
Version Info:
0: [No Data]

Application.Generic.3112431 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Makop.trQA
MicroWorld-eScan	Application.Generic.3112431
FireEye	Generic.mg.1c6112eb9f217c70
ALYac	Application.Generic.3112431
Cylance	Unsafe
K7AntiVirus	Unwanted-Program ( 005612301 )
BitDefender	Application.Generic.3112431
K7GW	Unwanted-Program ( 005612301 )
CrowdStrike	win/malicious_confidence_70% (W)
Arcabit	Application.Generic.D2F7DEF
Cyren	W32/Trojan.REOR-6425
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/CMDOW.B potentially unsafe
APEX	Malicious
Kaspersky	not-a-virus:RiskTool.Win32.Cmdow.c
NANO-Antivirus	Riskware.Win32.Cmdow.dmjuol
Rising	Trojan.Generic@AI.98 (RDML:JggBlQIME0CcO+fnlpFqtQ)
Ad-Aware	Application.Generic.3112431
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
Emsisoft	Application.Generic.3112431 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1242193
Microsoft	Program:Win32/Wacapew.C!ml
GData	Application.Generic.3112431
Cynet	Malicious (score: 100)
McAfee	Artemis!1C6112EB9F21
MAX	malware (ai score=79)
VBA32	BScope.Trojan.Wacatac
Ikarus	Trojan.Scar
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/CMDOW
Cybereason	malicious.4767c1