Categories: Spy

Spyware.Oski.Generic (file analysis)

The Spyware.Oski.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.Oski.Generic virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
A process attempted to delay the analysis task.
The binary likely contains encrypted or compressed data.
Checks for the presence of known windows from debuggers and forensic tools
Attempts to repeatedly call a single API many times in order to delay analysis time
Checks the version of Bios, possibly for anti-virtualization
Detects VirtualBox through the presence of a registry key
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

hostisgerhg.tk

a.tomx.xyz

How to determine Spyware.Oski.Generic?


File Info:
crc32: F5857573md5: 9fa5bfb2a6fa702ef279ff02924a2282name: oski.exesha1: f9f79b47d6dca30b6ed0cc94636b299923e10edasha256: 08167401255c540fed1d03109911cc841a05324958233cee0a798a0b13fdc877sha512: d796083383e4bddaf7946fb6a8dceeef515e08bb84580138a962a4190facae39f79bd0564f8f9c21674e694105cdcdbc2af79371db2bc8ed2cd43273f7f0af6cssdeep: 49152:dbjJjBx2m/qJD0VIFjFItQTKq4KhcK9a/IrViw4heHDDKjLZ:dhBx2m/+0VwFuiIgr4w4hev8Ztype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright  2019Assembly Version: 1.2.3.0InternalName: Liberation.ServiceProcess.dllFileVersion: 1.2.3.0CompanyName: LegalTrademarks: Comments: ProductName: Liberation.ServiceProcessProductVersion: 1.2.3.0FileDescription: Liberation.ServiceProcessOriginalFilename: Liberation.ServiceProcess.dllTranslation: 0x0000 0x04b0

Spyware.Oski.Generic also known as:

Bkav	HW32.Packed.
MicroWorld-eScan	Trojan.GenericKD.42933584
McAfee	Artemis!9FA5BFB2A6FA
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
BitDefender	Trojan.GenericKD.42933584
K7GW	Trojan ( 005633e81 )
Cybereason	malicious.7d6dca
BitDefenderTheta	Gen:NN.ZexaF.34104.g22@aO2D4Fpi
ESET-NOD32	a variant of Win32/Packed.Themida.HJO
GData	Win32.Trojan.OskiStealer.1L5D41
Kaspersky	Trojan.Win32.Chapak.eklq
Rising	Malware.Heuristic!ET#94% (RDMK:cmRtazoGTgNarKMDss+LtltGO4Co)
Ad-Aware	Trojan.GenericKD.42933584
Emsisoft	Trojan.GenericKD.42933584 (B)
DrWeb	Trojan.Siggen9.33579
Invincea	heuristic
McAfee-GW-Edition	Artemis!Trojan
SentinelOne	DFI – Suspicious PE
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.9fa5bfb2a6fa702e
Sophos	Mal/Generic-S
APEX	Malicious
Jiangmin	Trojan.Banker.ClipBanker.nd
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D28F1D50
ZoneAlarm	Trojan.Win32.Chapak.eklq
Microsoft	Trojan:Win32/Wacatac.D!ml
VBA32	BScope.Trojan.Tiggre
MAX	malware (ai score=81)
Malwarebytes	Spyware.Oski.Generic
Panda	Trj/CI.A
Tencent	Win32.Trojan.Chapak.Hxzx
Fortinet	W32/PossibleThreat
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	Generic/HEUR/QVM19.1.559F.Malware.Gen