Categories: Trojan

Trojan.Generic.31574792 (file analysis)

The Trojan.Generic.31574792 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.31574792 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Generic.31574792?


File Info:
name: 4D60865F253A6187DC65.mlwpath: /opt/CAPEv2/storage/binaries/9079379c0d2b5812125aa9e2f272347db63bf4e5da67d920056757588e73d185crc32: BFF8CC04md5: 4d60865f253a6187dc653ebe41d79ebdsha1: 8359f5e435954148e417ae63ad2d6880fc895f36sha256: 9079379c0d2b5812125aa9e2f272347db63bf4e5da67d920056757588e73d185sha512: db70e1168eca8107dc24702057218ea01d2e13c6d2f09dd0cb29d69d05c5250d15902365f801acb1f971c132ebd04f64de1f3fec29e768bbf117d10803b342b5ssdeep: 196608:jUKQwEfDa9yTaOifjIn3LFFFnurExinF6i8/qayZc71M+YamMiA:YxDa9+Z+jEkr2inFc/qDC71ivMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T168B60142B7C280B1EDD66531117F7B33633A6F094722D9DB5394BDA16D322E2663A383sha3_384: 7df92521625e6d8bb85cd41796bb99a3cfee1e0d66a9a2ac47c4734705bc8bb2e74178748fa41c6f45e710816456d7d1ep_bytes: 558bec6aff68f865dc0068a074470064timestamp: 2022-05-22 04:25:22
Version Info:
0: [No Data]

Trojan.Generic.31574792 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Riskware.Win32.FlyStudio.1!c
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.Generic.31574792
FireEye	Generic.mg.4d60865f253a6187
McAfee	Artemis!4D60865F253A
Cylance	Unsafe
VIPRE	Trojan.Generic.31574792
Sangfor	Riskware.Win32.FlyStudio.Vu4w
K7AntiVirus	Trojan ( 005246d51 )
Alibaba	RiskWare:Win32/FlyStudio.eb534e3f
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.435954
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Otwycal-166
Kaspersky	not-a-virus:UDS:RiskTool.Win32.FlyStudio.cjva
BitDefender	Trojan.Generic.31574792
NANO-Antivirus	Trojan.Win32.BlackHole.hqumcr
Avast	Win32:Malware-gen
Ad-Aware	Trojan.Generic.31574792
Emsisoft	Trojan.Generic.31574792 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Trapmine	malicious.moderate.ml.score
Sophos	Generic PUA ID (PUA)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.11UD6H7
Antiy-AVL	Trojan/Generic.ASCommon.FA
Arcabit	Trojan.Generic.D1E1CB08
ViRobot	Trojan.Win32.Z.Pse.10436608.C
Microsoft	Trojan:Win32/Wacatac.A!ml
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZexaF.34806.@tW@amRPMFab
ALYac	Trojan.Generic.31574792
MAX	malware (ai score=86)
Malwarebytes	Trojan.MalPack.FlyStudio
TrendMicro-HouseCall	TROJ_GEN.R002H0CEN22
Rising	Trojan.Generic@AI.100 (RDML:hhfOW8oDPeJcNcBS6klTgQ)
Ikarus	PUA.FlyStudio
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.65CA!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (W)