About “Trojan.Win32.Injuke.hsdf” infection

The Trojan.Win32.Injuke.hsdf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Injuke.hsdf virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses suspicious command line tools or Windows utilities
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Injuke.hsdf?

File Info:
name: 7B2CA6E7C2047E8702EC.mlw
path: /opt/CAPEv2/storage/binaries/63e84e82879b093f72b3f229b7be2321a72f8f2a0efafe52b98b0c7578684d34
crc32: 87112340
md5: 7b2ca6e7c2047e8702ecd731760d1136
sha1: a18170b3af5ad4b33f13a070f98e25749ec8a859
sha256: 63e84e82879b093f72b3f229b7be2321a72f8f2a0efafe52b98b0c7578684d34
sha512: d8421730ef84031cf4f19fdb4b8112b9a1a707805701363b717f5c19988a53e3df489b5c50e6afe7b1ac6b7ca16ab30e9a236b2e6abaad1655847a3da58f5e5d
ssdeep: 24576:WI39dWOK2s+bHNl9ivhSM5lToFwnnAvoS6hUT1efIoH7pyFV/uN4vxt:W6dPGMxEtPAgSCyef5EuCt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C3452393BD65C875D2A1CCF05D8A8000DE267A970076705DF7AC8F8E8F3B1B0A949B5B
sha3_384: d8a8e6f2e473ff34ce777a9c10f66d8a1075e7a02f8571641ab288e3a5d6f38c09ad2d52fffbd268059a9a183cf63f81
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 2023-08-28 20:52:24

Version Info:
Comments: This installation was built with Inno Setup: http://www.innosetup.com
CompanyName:                                                             
FileDescription: TV Previewer Setup                                          
FileVersion:                     
LegalCopyright:                                                                                                     
Translation: 0x0409 0x04e4

Trojan.Win32.Injuke.hsdf also known as:

How to remove Trojan.Win32.Injuke.hsdf?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.