Malware

Application.Bundler.DownloadAssistant.7 (B) (file analysis)

Malware Removal

The Application.Bundler.DownloadAssistant.7 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Bundler.DownloadAssistant.7 (B) virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Application.Bundler.DownloadAssistant.7 (B)?


File Info:

name: F6C8524D711C6EB5CC1B.mlw
path: /opt/CAPEv2/storage/binaries/7cdfe2504762c6516df39dd067ac2971a7f4835222e72e8a12e1e268dcf1d0ee
crc32: 0B5C3FDD
md5: f6c8524d711c6eb5cc1bc913ad4bced8
sha1: 7f8a7d2edffac6ac57c1048a44eb7a96f33d4695
sha256: 7cdfe2504762c6516df39dd067ac2971a7f4835222e72e8a12e1e268dcf1d0ee
sha512: 16893a316597164d6fb914dc4249bce005998e08db9576f48cb3b80bf0be2ae29ddb54afa19064f5a6d918f46f5b27bb6fe525dfed91be3cd914f85fc0012929
ssdeep: 24576:HTy3v4VQ4ZGZZa3BIkI9X9p0Gwo4WJov4MzGzl/c7MC:zy3vrpX9ms4W7MzG0z
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E525BE0279A3D075C1AE00359A68ABD24DBEBF60073759EB3B94365C5F305C1AE76B0B
sha3_384: bffd30e272911d9bb91cca42b8235990ed3383c144b7458a998a8f82f424e2e337d21735aee558b3a71e68a227475706
ep_bytes: 558bec83ec145356576a00ff15085049
timestamp: 2015-10-04 15:28:15

Version Info:

FileDescription: Wizard101
FileVersion: 3.0.0.126
InternalName: Wizard101 Setup.exe
LegalCopyright: (c) Download Assistant
OriginalFilename: Wizard101 Setup.exe
ProductName: Wizard101
ProductVersion: 3.0.0.126
CompanyName: Download Assistant
Translation: 0x0409 0x04b0

Application.Bundler.DownloadAssistant.7 (B) also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.mu7x
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Application.Bundler.DownloadAssistant.7
FireEyeGeneric.mg.f6c8524d711c6eb5
CAT-QuickHealTrojan.MauvaiseRI.S5245105
SkyhighBehavesLike.Win32.Generic.fc
ALYacGen:Variant.Application.Bundler.DownloadAssistant.7
Cylanceunsafe
ZillyaTrojan.Diple.Win32.139032
SangforDownloader.Win32.Agent.Vgom
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaMalware:Win32/km_2c5a2cb5.None
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DownloadAssistant.B potentially unwanted
APEXMalicious
McAfeeGenericRXTQ-VL!F6C8524D711C
KasperskyVHO:Trojan.Win32.Diple.gen
BitDefenderGen:Variant.Application.Bundler.DownloadAssistant.7
NANO-AntivirusRiskware.Win32.DownloadAsist.eexjna
AvastWin32:Evo-gen [Trj]
EmsisoftGen:Variant.Application.Bundler.DownloadAssistant.7 (B)
GoogleDetected
DrWebTrojan.Vittalia.1474
VIPREGen:Variant.Application.Bundler.DownloadAssistant.7
Trapminemalicious.high.ml.score
SophosDownload Assistant (PUA)
IkarusPUA.DownloadAssistant
JiangminTrojan.Heur.zy
VaristW32/ABRisk.ZLTC-3729
Antiy-AVLRiskWare/Win32.Bundler
Kingsoftmalware.kb.a.998
MicrosoftPUADlManager:Win32/DownloadAssistant
XcitiumApplication.Win32.DownloadAssistant.AR@759qcz
ArcabitTrojan.Application.Bundler.DownloadAssistant.7
ViRobotAdware.Lazy.1040932.A
ZoneAlarmVHO:Trojan.Win32.Diple.gen
GDataWin32.Trojan.PSE.1J1Y9TZ
AhnLab-V3PUP/Win.DownloadAssistant.R498483
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36802.@u0@aihaVUgi
MAXmalware (ai score=74)
VBA32Downloader.DownloadAsist
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingAdware.DownloadAssistant!1.A3BC (CLASSIC)
YandexTrojan.GenAsa!2WJYNv6rGDw
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.192451409.susgen
FortinetRiskware/Bundler
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.d711c6
DeepInstinctMALICIOUS
alibabacloudSuspicious

How to remove Application.Bundler.DownloadAssistant.7 (B)?

Application.Bundler.DownloadAssistant.7 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment