Categories: PUA

Win32:PUPX-gen [PUP] malicious file

The Win32:PUPX-gen [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:PUPX-gen [PUP] virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

z.whorecord.xyz

a.tomx.xyz

w.nanweng.cn

How to determine Win32:PUPX-gen [PUP]?


File Info:
crc32: C43DA8D4md5: f2712b814b394659b33cb2e54584bb37name: E69AB4E9A38EE5BDB1E99FB352908406_102071.exesha1: 912c2c375571adbf02363c63e4df7194f1bd6df0sha256: 364c9c11abbde852e5d7d29c7e1ce295ba7bd8505178eb737bfb7b4033d7e13asha512: e3fd5cc12bd54e34b7aa6251da653591a1ee6309c6da22f6a7ad6890ced01293602714373ca774d8d458c611f2c7b9a889eebfd49a2fdabf15389a23f19e8c9cssdeep: 24576:MB+FvOMlXspw7nU6LtEeTR4kBFuHXxW4Z20gZzZVlSzJzndeNUPq+C:MBCqwbdZu3d00oVlSzJ7dep+Ctype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2020InternalName: x667ax80fdx4e0bx8f7dx5668.exeFileVersion: 5.0.0.0207ProductName: x667ax80fdx4e0bx8f7dx5668.exeProductVersion: 5.0.0.0207FileDescription: x667ax80fdx4e0bx8f7dx5668OriginalFilename: x667ax80fdx4e0bx8f7dx5668.exeTranslation: 0x0804 0x04b0

Win32:PUPX-gen [PUP] also known as:

MicroWorld-eScan	Gen:Variant.Razy.583593
McAfee	QJWMonkey
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Adware ( 005105151 )
BitDefender	Gen:Variant.Razy.583593
K7GW	Adware ( 005105151 )
TrendMicro	TROJ_GEN.R002C0PBD20
Symantec	Trojan.Gen.9
APEX	Malicious
Avast	Win32:PUPX-gen [PUP]
GData	Gen:Variant.Razy.583593
Kaspersky	not-a-virus:HEUR:Downloader.Win32.Generic
Alibaba	AdWare:Win32/Qjwmonkey.4e15722a
NANO-Antivirus	Riskware.Win32.Qjwmonkey.hamvws
Endgame	malicious (high confidence)
Sophos	QjMonkey (PUA)
Comodo	Application.Win32.Qjwmonkey.HU@8hjovh
F-Secure	Heuristic.HEUR/AGEN.1042852
DrWeb	Adware.Qjwmonkey.168
Invincea	heuristic
McAfee-GW-Edition	QJWMonkey
MaxSecure	Trojan.Malware.121218.susgen
FireEye	Generic.mg.f2712b814b394659
Emsisoft	Gen:Variant.Razy.583593 (B)
Ikarus	PUA.Qjwmonkey
Cyren	W32/Adware.OBYM-0540
Jiangmin	Downloader.Generic.avgr
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1042852
Antiy-AVL	GrayWare[AdWare]/Win32.Qjwmonkey
Microsoft	PUA:Win32/Qjwmonkey
Arcabit	Trojan.Razy.D8E7A9
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.Generic
AhnLab-V3	PUP/Win32.RL_Qjwmonkey.R287544
VBA32	BScope.Adware.Qjwmonkey
ALYac	Gen:Variant.Razy.583593
MAX	malware (ai score=100)
Ad-Aware	Gen:Variant.Razy.583593
Malwarebytes	Adware.ChinAd
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Adware.Qjwmonkey.H
TrendMicro-HouseCall	TROJ_GEN.R002C0PBD20
Rising	Adware.Downloader!1.BDCA (CLOUD)
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Qjwmonkey.KD!tr
AVG	FileRepMalware [PUP]
Cybereason	malicious.14b394
Paloalto	generic.ml