Hoax.Pihun (file analysis)

The Hoax.Pihun is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Hoax.Pihun virus can do?

Anomalous binary characteristics

How to determine Hoax.Pihun?


File Info:
crc32: A38417BB
md5: f8a75df5b4dbada33fc52583b9b6c0ed
name: F8A75DF5B4DBADA33FC52583B9B6C0ED.mlw
sha1: 08cd7d8c5fc3fbe8ee77af1db525a4d5629801ac
sha256: ad9d5d278ea3feba4df09829124e704beee3e3d76e81627a254e379c428e369a
sha512: 6f99ac7d0d1c549c65b279f0750824b87590509edf1ac055ca1c9a9983cae457c676e412322fd8e689008b426ef7e0e388373df519000127d92296c5c67a69e7
ssdeep: 12288:0EfPyzKnKsuBNK6vIQyb6n0bplbFpyadCVtcwn:3fPyzKnoBeYUlJpyadOcwn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Savvy xa9 Tuft Manor 1996-2006
InternalName: Zowie Blvd Coats Week Conch Avow
FileVersion: 10.7
CompanyName: Cutting Edge Software Inc.
Comments: Cleat Not Stub
ProductName: Squirm Maude
ProductVersion: 10.7
FileDescription: Apron
OriginalFilename: Lies.exe
Translation: 0x0409 0x04b0

Hoax.Pihun also known as:

K7AntiVirus	Trojan ( 002e9a531 )
Elastic	malicious (high confidence)
McAfee	GenericRXLI-AV!F8A75DF5B4DB
Cylance	Unsafe
Zillya	Trojan.LockScreen.Win32.7183
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Win32/LockScreen.93b62a2e
K7GW	Trojan ( 002e9a531 )
Cybereason	malicious.c5fc3f
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/LockScreen.AIV
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Trojan.Win32.Ransom.eddpqy
Tencent	Win32.Trojan.Lockscreen.Efat
Comodo	Malware@#11w6olv9k2df5
VIPRE	Trojan.Win32.EncPk.acl (v)
McAfee-GW-Edition	GenericRXLI-AV!F8A75DF5B4DB
FireEye	Generic.mg.f8a75df5b4dbada3
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1137553
AegisLab	Trojan.Win32.Generic.4!c
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Dynamer!ac
Acronis	suspicious
VBA32	Hoax.Pihun
MAX	malware (ai score=100)
Malwarebytes	Malware.Heuristic.1006
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.92 (RDML:YziHcuUK1GiQaIHziYRnCQ)
Yandex	Trojan.LockScreen!WgJqDL0W/9M
Ikarus	Trojan.Win32.LockScreen
eGambit	Generic.Malware
Fortinet	W32/Yakes.LS!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Hoax.Pihun?

Hoax.Pihun removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X