Generic PUA MD (PUA) (file analysis)

The Generic PUA MD (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic PUA MD (PUA) virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.

How to determine Generic PUA MD (PUA)?


File Info:
crc32: EF6D0ED5
md5: f4d328a4461f378e5b138c853dfcabe2
name: Halo-The-Master-Chief-Collection-Halo-Reach-v1.0-v20200303-Plus-13-Trainer.exe
sha1: c39e7bc03b7c0199d6dfbde70fdae1e22d7a1f35
sha256: 10efd86a95e8f617b7ae69875874ec16fc9b07e8befd55771f99db07bc646b19
sha512: 399632d81267d902cfd7ec37182eb97c9027fca22b9b9a43ae893ead32b597753141a0b3726ac5c8daa073b0bd474fa99dc844d0f228467875823c66c54995a5
ssdeep: 24576:dGWUZ9tbAPnplkHmo9roS6Hex0b5HjOt8mYL7DS:dSFAffkHl96HexKHjL
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: FLiNG Copyright (C) 2020
InternalName: Halo The Master Chief Collection (Halo Reach) v1.0-v20200303 Plus 13 Trainer
FileVersion: 1.0.0.1
CompanyName: 3DMGAME
ProductName: Halo The Master Chief Collection (Halo Reach) v1.0-v20200303 Plus 13 Trainer
ProductVersion: 1.0.707.1
FileDescription: Halo The Master Chief Collection (Halo Reach) v1.0-v20200303 Plus 13 Trainer
OriginalFilename: Halo The Master Chief Collection (Halo Reach) v1.0-v20200303 Plus 13 Trainer.exe
Translation: 0x0000 0x04b0

Generic PUA MD (PUA) also known as:

Cylance	Unsafe
Sangfor	Malware
CrowdStrike	win/malicious_confidence_60% (W)
Rising	PUA.Presenoker!8.F608 (CLOUD)
Trapmine	malicious.moderate.ml.score
Sophos	Generic PUA MD (PUA)
Cyren	W64/Application.XZIV-7921
Microsoft	PUA:Win32/Presenoker
ESET-NOD32	a variant of Win64/GameHack.CT potentially unsafe
Fortinet	Riskware/GameHack

How to remove Generic PUA MD (PUA)?

Generic PUA MD (PUA) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X