Trojan.SmallPMF.S31714342 (file analysis)

The Trojan.SmallPMF.S31714342 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.SmallPMF.S31714342 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.SmallPMF.S31714342?


File Info:
name: C3DB7A245DD53F3FDC3D.mlw
path: /opt/CAPEv2/storage/binaries/81ace886fdc26a605f9cd638a67f91e8b1422913acbe5dff2f7325fd7008fe33
crc32: 9EF3329F
md5: c3db7a245dd53f3fdc3d9a31568eda5d
sha1: 23695d12b7ef9457386c79836d977234267105ec
sha256: 81ace886fdc26a605f9cd638a67f91e8b1422913acbe5dff2f7325fd7008fe33
sha512: 5790cd89ef091d430d4e46d74d9fec7c88ac19c4ab06d16ee7a0e7773f56f593f18777ced9e745a06252749d59a85fb7bdeb30cef4a18446c1f7d1a2b3c8426d
ssdeep: 1536:b1x1Qja7luy6y0s4sqfkbnAKBOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0TO:rOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17243191EE903A5F6EF2D08F002CBF5BE4A24A530D4254E82E741CD69F973DA53A9D352
sha3_384: aa32e18afece98418cc40e6bd5a40dcb7446cfa1da88edad243976f96f6c08aaa69bc9abd0fa366d2eb15df4ff3436f7
ep_bytes: 5589e583ec08c7042402000000ff159c
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.SmallPMF.S31714342 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.96072
FireEye	Generic.mg.c3db7a245dd53f3f
CAT-QuickHeal	Trojan.SmallPMF.S31714342
Skyhigh	BehavesLike.Win32.Duptwux.qm
ALYac	Trojan.GenericKDZ.96072
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (D)
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Trojan.GenericKDZ.96072
NANO-Antivirus	Trojan.Win32.Mudrop.ijmve
Emsisoft	Trojan.GenericKDZ.96072 (B)
DrWeb	Trojan.DownLoader8.56532
VIPRE	Trojan.GenericKDZ.96072
Trapmine	malicious.moderate.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Mudrop.cbn
Varist	W32/Virtumonde!Generic
MAX	malware (ai score=85)
Kingsoft	malware.kb.b.997
Microsoft	Trojan:Win32/MyDoom!pz
Arcabit	Trojan.Generic.D17748
GData	Trojan.GenericKDZ.96072
Google	Detected
McAfee	GenericRXVR-KV!C3DB7A245DD5
Rising	Trojan.Generic@AI.100 (RDML:SF744OFI9Bk1E9duQ/9OoA)
Yandex	Trojan.AvsArher.bSFjus
Ikarus	Trojan.Win32.Agent
Fortinet	W32/GenericKDZ.6663!tr

How to remove Trojan.SmallPMF.S31714342?

Trojan.SmallPMF.S31714342 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X