Exploit.Win32.Shellcode.sll malicious file

The Exploit.Win32.Shellcode.sll is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Exploit.Win32.Shellcode.sll virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Georgian
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

vaggner.uno

a.tomx.xyz

sfirza.best

historychina.best

chinabuild.uno

How to determine Exploit.Win32.Shellcode.sll?


File Info:
crc32: F9D4B44B
md5: b1c27eec25fbe8a4ddd435526d1dd6a9
name: upload_file
sha1: ac9670aa3839ede214426046bb0d0307ebb4a91b
sha256: 545aa71b679a946f129b50ca4056cf28a3f120751eb942103a1c7db7e0119f99
sha512: 4d00155b281df1b62801e606ace61419bd9f46cfeba0e022b640b7f61c0b01fa55545ac8bcd76834f6cb97db8968e546977ae6f60c0b13a90f1f1b607ac1c0db
ssdeep: 1536:6yrpzw7S7m3w9+NjMP+UWOZkBfRKM5WZY4gJnMXmjxUWsYycxg43GclPddF4Z68:tpzm3w9bW1atHqs9f42cL3fiVsPH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: sdoxfbok.uda
FileVersion: 1.2.9

Exploit.Win32.Shellcode.sll also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34364261
FireEye	Generic.mg.b1c27eec25fbe8a4
CAT-QuickHeal	Trojan.Inject.22252
Cylance	Unsafe
Sangfor	Malware
BitDefender	Trojan.GenericKD.34364261
Cybereason	malicious.a3839e
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Exploit.Win32.Shellcode.sll
Ad-Aware	Trojan.GenericKD.34364261
Invincea	heuristic
Fortinet	W32/GenKryptik.EQFR!tr
SentinelOne	DFI – Malicious PE
MAX	malware (ai score=88)
Arcabit	Trojan.Generic.D20C5B65
Microsoft	Trojan:Win32/Caynamer.A!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
Malwarebytes	Trojan.MalPack.GS
ESET-NOD32	a variant of Win32/Kryptik.HFNG
Rising	Trojan.Kryptik!1.CA64 (CLASSIC)
eGambit	Unsafe.AI_Score_87%
GData	Trojan.GenericKD.34364261
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Generic/HEUR/QVM10.2.42AB.Malware.Gen

How to remove Exploit.Win32.Shellcode.sll?

Exploit.Win32.Shellcode.sll removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Exploit.Win32.Shellcode.sll malicious file