Crack

Should I remove “Win32/GameHack.FGP potentially unsafe”?

Malware Removal

The Win32/GameHack.FGP potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GameHack.FGP potentially unsafe virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32/GameHack.FGP potentially unsafe?


File Info:

name: EAA1E7185D64C6231EC4.mlw
path: /opt/CAPEv2/storage/binaries/a7f4d29a67a283a54902de968cd1ea9bf625fab4ad27b4a8f02f4d95257a65fe
crc32: B0036A13
md5: eaa1e7185d64c6231ec49b259cd707ed
sha1: db4669085d50dbc71760ee7c030aa379e6788a46
sha256: a7f4d29a67a283a54902de968cd1ea9bf625fab4ad27b4a8f02f4d95257a65fe
sha512: 5414a2830593b56c3b3814bea9189ad5d3722e66fe5845ccf2375340196027b5d2cb957465e73024c5d673d7658f83a55765fb468c24cbbb1467fbd27e8c727f
ssdeep: 49152:wdVaoH3MsRoePAb2hG76AqF+ca6Oj3dcvSr6sps:5sGeIb26Vcil
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12D758C01ED934070CC162170F06AFB7F86392D474B2449E763E8FD67BAA0FD216B6999
sha3_384: 96887f26b98c7de0cb8604b499d8574c9e3f3a120dfac48621afa7033c626668e7042025f957ae0560b4c4283cd17c72
ep_bytes: e802050000e97afeffffcccccc6825b6
timestamp: 2021-11-20 18:15:33

Version Info:

0: [No Data]

Win32/GameHack.FGP potentially unsafe also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Fugrafa.4!c
MicroWorld-eScanGen:Variant.Fugrafa.167742
FireEyeGeneric.mg.eaa1e7185d64c623
McAfeeArtemis!EAA1E7185D64
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusUnwanted-Program ( 0057fb771 )
K7GWUnwanted-Program ( 0057fb771 )
CyrenW32/GameHack.AL.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GameHack.FGP potentially unsafe
APEXMalicious
ClamAVWin.Malware.Zusy-9883820-0
BitDefenderGen:Variant.Fugrafa.167742
AvastWin32:MalwareX-gen [Trj]
Ad-AwareGen:Variant.Fugrafa.167742
EmsisoftGen:Variant.Fugrafa.167742 (B)
McAfee-GW-EditionBehavesLike.Win32.Injector.th
SophosGeneric PUA NL (PUA)
GDataGen:Variant.Fugrafa.167742
ArcabitTrojan.Fugrafa.D28F3E
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
VBA32BScope.TrojanPSW.Stealer
ALYacGen:Variant.Fugrafa.167742
MAXmalware (ai score=80)
TrendMicro-HouseCallTROJ_GEN.R002H09KL21
YandexRiskware.Agent!pdaRzGkZ2mw
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/GameHack
AVGWin32:MalwareX-gen [Trj]

How to remove Win32/GameHack.FGP potentially unsafe?

Win32/GameHack.FGP potentially unsafe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment