Categories: Malware

Should I remove “Application.Bundler.286”?

The Application.Bundler.286 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Bundler.286 virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Crashed cuckoomon during analysis. Report this error to the Github repo.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Application.Bundler.286?


File Info:
crc32: 169D0095md5: ec2521f1ae1d063647e8475a0f08337ename: Memu-Installer.exesha1: a6f0ada15fce03d06e9e1591988f03ee99f12260sha256: 358c52c016802e9b696bd97d3426588d29d6da2ffd31addb7c2cd5c490863555sha512: 96433c4096a74c2528a4a70187f54eff5f57d476194e2c9103b608d9e0d80110a18ceed0a5544d70424bb3d42b18cd343ac27aa50ad8f3cefd4ff237b5e2e30essdeep: 98304:71Ljlem23cw2K/qcA/UbcFHBdDcFuxmSVEKwV+F:79lewdTvdWfSVOCtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: MEmu Play                                                                                           FileVersion: 1.0.1.1             CompanyName: MEmu Play                                                   Comments: This installation was built with Inno Setup.ProductName: MEMU-Setup                                                  ProductVersion: 1.0.1.1                                           FileDescription: MEmu Play Installer                                         Translation: 0x0000 0x04b0

Application.Bundler.286 also known as:

MicroWorld-eScan	Gen:Variant.Application.Bundler.286
BitDefender	Gen:Variant.Application.Bundler.286
APEX	Malicious
Ad-Aware	Gen:Variant.Application.Bundler.286
Emsisoft	Gen:Variant.Application.Bundler.286 (B)
Invincea	heuristic
Fortinet	W32/Ulise.9881!tr
FireEye	Generic.mg.ec2521f1ae1d0636
Sophos	InnoMod (PUA)
SentinelOne	DFI – Suspicious PE
Webroot	W32.Adware.Gen
MAX	malware (ai score=77)
Antiy-AVL	GrayWare/Win32.Generic
Endgame	malicious (high confidence)
Arcabit	Trojan.Application.Bundler.286
Microsoft	PUA:Win32/InstallCore
AhnLab-V3	PUP/Win32.InstallCore.C3361867
Malwarebytes	Adware.InstallCore
Ikarus	PUA.InstallCore
MaxSecure	Adware.not.a.virus.WIN32.AdWare.Generic_178279
GData	Gen:Variant.Application.Bundler.286
Qihoo-360	HEUR/QVM20.1.A35C.Malware.Gen