Malware

Application.Generic.3072354 (file analysis)

Malware Removal

The Application.Generic.3072354 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Generic.3072354 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Deletes its original binary from disk
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Application.Generic.3072354?


File Info:

crc32: B86E6116
md5: a828469e9822d2217d02b2708067f9b7
name: A828469E9822D2217D02B2708067F9B7.mlw
sha1: 7ce3f22bbe1ba3f612d00a2cd6a130a0e4e6ea44
sha256: 912bd24f8110155ba5b9dfb2acdc2c3633812ea0dee6f9c5948c80281cc31812
sha512: 9c3bca4e92782d73fef8b4c8259b25ee9c194a94c933517357612d0f2044e626c820d88d2ff11775e3b39eece0178a388cf2695df6a5f3dfd1bdbe7601549573
ssdeep: 49152:9tRAciWLbXegPbHtvd/REX5Iui4lSiZ0aq:N46yebHtvZRyIui4lSqq
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Application.Generic.3072354 also known as:

K7AntiVirusTrojan ( 0057ffc71 )
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43250
CynetMalicious (score: 100)
ALYacApplication.Generic.3072354
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7GWTrojan ( 0057ffc71 )
Cybereasonmalicious.e9822d
CyrenW32/CoinMiner.CQ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HITO
APEXMalicious
AvastWin32:CoinminerX-gen [Trj]
Kasperskynot-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.vho
BitDefenderApplication.Generic.3072354
MicroWorld-eScanApplication.Generic.3072354
TencentTrojan.Win32.Coinminer.yi
Ad-AwareApplication.Generic.3072354
SophosGeneric ML PUA (PUA)
ComodoPacked.Win32.MUPX.Gen@24tbus
BitDefenderThetaGen:NN.ZexaF.34266.InZ@a4DEJ@n
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeApplication.Generic.3072354
EmsisoftApplication.Generic.3072354 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.ULPM.Gen
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASBOL.C68A
MicrosoftTrojan:Win32/Injector.RAQ!MTB
GDataApplication.Generic.3072354
AhnLab-V3Malware/Gen.RL_Reputation.R365006
McAfeeGenericRXAA-FA!A828469E9822
MAXmalware (ai score=72)
VBA32Trojan.Packed
MalwarebytesTrojan.Crypt
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.D12D (CLASSIC)
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.EAHK!tr
AVGWin32:CoinminerX-gen [Trj]

How to remove Application.Generic.3072354?

Application.Generic.3072354 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment