Malware

Generic.Application.CoinMiner.1.395C9431 malicious file

Malware Removal

The Generic.Application.CoinMiner.1.395C9431 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Application.CoinMiner.1.395C9431 virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Generic.Application.CoinMiner.1.395C9431?


File Info:

crc32: 92690447
md5: 6704726816368e43ce54c5dff852afbf
name: tmpm0wcv2lt
sha1: f1f4789e92c8efe37242dc5de08fa6358fc97447
sha256: 47b27442e7c18910b143d8ad09e1b788ea3aedf9da20f4925e62c60e0a13d6e3
sha512: cf516fba2a3f5eadce084ea174e485fe0bf55c99278d7d5644568c3294916ece85811a211a770264705b85d8070f040b1600b26fd2a36d8fae9ce3580f785183
ssdeep: 24576:9avgp4XjJq1Ore0BSgPiPfJe3LgpjrtA0HI6mDTpUnc0nOjY:oc4zqOrLAPRuLgpt/ItCt
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

LegalCopyright: (C) 360.cn All Rights Reserved.
InternalName: MessageNotify
FileVersion: 1, 0, 0, 1061
CompanyName: 360.cn
ProductName: 360x5b89x5168x536bx58eb
ProductVersion: 1, 0, 0, 1061
FileDescription: 360x5b89x5168x536bx58eb x6728x9a6cx9632x706bx5899x6a21x5757
OriginalFilename: MessageNotify.exe
Translation: 0x0409 0x04b0

Generic.Application.CoinMiner.1.395C9431 also known as:

MicroWorld-eScanGeneric.Application.CoinMiner.1.395C9431
CAT-QuickHealTrojan.GenericPMF.S10700594
McAfeeGenericRXAA-AA!670472681636
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Miner.4!c
SangforMalware
BitDefenderGeneric.Application.CoinMiner.1.395C9431
SymantecML.Attribute.HighConfidence
APEXMalicious
ClamAVWin.Coinminer.Generic-7151250-0
GDataWin32.Application.Coinminer.BU
KasperskyTrojan.Win32.Miner.akcpv
NANO-AntivirusRiskware.Win32.BtcMine.gutbsp
AvastWin32:HarHarMiner-A [Trj]
RisingPUF.CoinMiner!8.4639 (RDMK:cmRtazqAho8IWPaU+vy/cJIMUIes)
Ad-AwareGeneric.Application.CoinMiner.1.395C9431
EmsisoftGeneric.Application.CoinMiner.1.395C9431 (B)
ComodoTrojWare.Win32.CoinMiner.HR@8pgq0i
F-SecureHeuristic.HEUR/AGEN.1046019
DrWebTool.BtcMine.2258
ZillyaTrojan.Miner.Win32.9427
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Injector.tc
Trapminemalicious.high.ml.score
FireEyeGeneric.Application.CoinMiner.1.395C9431
SophosXMRig Miner (PUA)
IkarusPUA.CoinMiner
CyrenW32/Application.ZXQG-2419
JiangminRiskTool.BitMiner.bzvn
AviraHEUR/AGEN.1046019
MAXmalware (ai score=84)
Antiy-AVLRiskWare[RiskTool]/Win32.BitCoinMiner
Endgamemalicious (moderate confidence)
ArcabitGeneric.Application.CoinMiner.1.395C9431
ZoneAlarmTrojan.Win32.Miner.akcpv
MicrosoftTrojan:Win32/CoinMiner.C!cl
AhnLab-V3Trojan/Win32.CoinMiner.R326403
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34100.fnKfaujVv8oi
VBA32BScope.Trojan.Miner
MalwarebytesTrojan.BitCoinMiner
ESET-NOD32a variant of Win32/CoinMiner.ES potentially unwanted
TencentMalware.Win32.Gencirc.10b8b4fa
YandexRiskware.Agent!
SentinelOneDFI – Suspicious PE
FortinetW32/CoinMiner.ES!tr
AVGWin32:HarHarMiner-A [Trj]
Cybereasonmalicious.816368
PandaTrj/Genetic.gen
MaxSecureWin.MxResIcn.Heur.Gen

How to remove Generic.Application.CoinMiner.1.395C9431?

Generic.Application.CoinMiner.1.395C9431 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment