Categories: Malware

Exploit.Win32.Shellcode.sll malicious file

The Exploit.Win32.Shellcode.sll is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Exploit.Win32.Shellcode.sll virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Georgian
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

vaggner.uno

a.tomx.xyz

sfirza.best

historychina.best

chinabuild.uno

How to determine Exploit.Win32.Shellcode.sll?


File Info:
crc32: F9D4B44Bmd5: b1c27eec25fbe8a4ddd435526d1dd6a9name: upload_filesha1: ac9670aa3839ede214426046bb0d0307ebb4a91bsha256: 545aa71b679a946f129b50ca4056cf28a3f120751eb942103a1c7db7e0119f99sha512: 4d00155b281df1b62801e606ace61419bd9f46cfeba0e022b640b7f61c0b01fa55545ac8bcd76834f6cb97db8968e546977ae6f60c0b13a90f1f1b607ac1c0dbssdeep: 1536:6yrpzw7S7m3w9+NjMP+UWOZkBfRKM5WZY4gJnMXmjxUWsYycxg43GclPddF4Z68:tpzm3w9bW1atHqs9f42cL3fiVsPHtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
InternalName: sdoxfbok.udaFileVersion: 1.2.9

Exploit.Win32.Shellcode.sll also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34364261
FireEye	Generic.mg.b1c27eec25fbe8a4
CAT-QuickHeal	Trojan.Inject.22252
Cylance	Unsafe
Sangfor	Malware
BitDefender	Trojan.GenericKD.34364261
Cybereason	malicious.a3839e
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Exploit.Win32.Shellcode.sll
Ad-Aware	Trojan.GenericKD.34364261
Invincea	heuristic
Fortinet	W32/GenKryptik.EQFR!tr
SentinelOne	DFI – Malicious PE
MAX	malware (ai score=88)
Arcabit	Trojan.Generic.D20C5B65
Microsoft	Trojan:Win32/Caynamer.A!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
Malwarebytes	Trojan.MalPack.GS
ESET-NOD32	a variant of Win32/Kryptik.HFNG
Rising	Trojan.Kryptik!1.CA64 (CLASSIC)
eGambit	Unsafe.AI_Score_87%
GData	Trojan.GenericKD.34364261
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Generic/HEUR/QVM10.2.42AB.Malware.Gen