Win32/GameHack.FRO potentially unsafe malicious file

The Win32/GameHack.FRO potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GameHack.FRO potentially unsafe virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/GameHack.FRO potentially unsafe?


File Info:
name: 33F8295C9B828067DC31.mlw
path: /opt/CAPEv2/storage/binaries/983860df64bc145ec1e1b69d5dac0002e48771a2cee1096de17798fadf1d1d7a
crc32: 7DA21899
md5: 33f8295c9b828067dc312c0405d93ed4
sha1: f81d59304627aee3fd05da1b11a4219861ffe434
sha256: 983860df64bc145ec1e1b69d5dac0002e48771a2cee1096de17798fadf1d1d7a
sha512: 5d17a7c155f36cd433aeae171f442f000c2ac3379d50d0404532fd1ebc28a14bf2e4654bc35b6ac2a1aa8991a7c268c51fc8315f50a0b1884e6db9056cff6a97
ssdeep: 24576:IjeM5P2TW3AlgapKzKtgaX/z2RhDDt69dDWmEEMnEFZcKOtzEn:qOge5/z2RhDDA9NMEbcKSzEn
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T10F55AE103994C078EBED0A70757D6F9B487EBA604B7001CF6BD4286D9B606D29A72F73
sha3_384: 9a2522f260b98b435ca5700841ea1ab4440732cd86d207b29d4b27b13e20895c0c435f11648a68bd11a968936bedac24
ep_bytes: 558bec837d0c017505e802060000ff75
timestamp: 2021-12-17 01:58:54

Version Info:
0: [No Data]

Win32/GameHack.FRO potentially unsafe also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (moderate confidence)
Skyhigh	BehavesLike.Win32.Infected.th
CrowdStrike	win/grayware_confidence_70% (D)
BitDefenderTheta	Gen:NN.ZedlaF.36680.sD4@aK3z6uki
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GameHack.FRO potentially unsafe
APEX	Malicious
Cynet	Malicious (score: 100)
Rising	Trojan.Generic@AI.100 (RDML:6FhjztLLrLUoa87QZrRmAg)
MaxSecure	Trojan.Malware.300983.susgen
DeepInstinct	MALICIOUS

How to remove Win32/GameHack.FRO potentially unsafe?

Win32/GameHack.FRO potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X