Downloader.Win32.Gamini.aavu malicious file

The Downloader.Win32.Gamini.aavu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Downloader.Win32.Gamini.aavu virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Downloader.Win32.Gamini.aavu?

File Info:
name: 8AD45E4F6574EE39F32F.mlw
path: /opt/CAPEv2/storage/binaries/1e3209f2e3f3d52da5729e4b4cad8fbc5659a6474bf03dd054d0c94f0334375a
crc32: 6294C83E
md5: 8ad45e4f6574ee39f32f1c05269a2e3c
sha1: 979102b0984a1519a7da9f21e026845b4aae63c1
sha256: 1e3209f2e3f3d52da5729e4b4cad8fbc5659a6474bf03dd054d0c94f0334375a
sha512: 818a2bdd30f3596cdbee7841d67aff248a662faada5f3b78f459bfae02d278f5232410246ee9cf166a28af37bb36cf8bcd7352b32eb41ba0723e858f203693dc
ssdeep: 49152:kBuZrEUl/jV3hmBwQz9Yp0ReJLJZ2iZ3vxm3c7ldc:6kLpxw99KBXvm3chO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T146D52816711614B9E65F253142236B987F37D9D0936F4A2F03B222BC8F79AB3299D1C3
sha3_384: 2ad7c0373a10999f1733eef6e0364e5b5a33134d42b7944300594d5718ee03a47e16c612f14c9599511207c39b35ba11
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: tuttop.com                                                  
FileDescription: Slay the Princess Setup                                     
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: Slay the Princess                                           
ProductVersion: 1.2 windows                                       
Translation: 0x0000 0x04b0

Downloader.Win32.Gamini.aavu also known as:

How to remove Downloader.Win32.Gamini.aavu?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.