Generic.Dacic.94CCEEA9.A.7AEF34A4 (file analysis)

The Generic.Dacic.94CCEEA9.A.7AEF34A4 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Dacic.94CCEEA9.A.7AEF34A4 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generic.Dacic.94CCEEA9.A.7AEF34A4?


File Info:
name: 6296AE02E338FE5C4018.mlw
path: /opt/CAPEv2/storage/binaries/a3a8ddf5d12301a5f7c7c9f017f67f0186403986c227a9d7bc51f9c9f6d12c64
crc32: 1B9475D9
md5: 6296ae02e338fe5c40182e9fd70f4571
sha1: cba4397e82954021070e690cd82846f85b346f6e
sha256: a3a8ddf5d12301a5f7c7c9f017f67f0186403986c227a9d7bc51f9c9f6d12c64
sha512: 2c5a315f29b5951cf9070d1f0933cf7e5dc8dafafb05df5427f35d73447c131e7368bb9b0d5c84a27e9c410648d893beac18e0c85a0ed323414bc21ac37cb2a1
ssdeep: 3072:XE3EfkoRKLqNd6XtWI38bkmRlvMqnviunc:XEXoZb6XF8omRlEqnviun
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T115048F628970BB13E951093517E06BFB801D3C2F4BE506097CAEDA5F3763D9A349FA42
sha3_384: ac80bc5ea5a4d1faa6dd3c7ec39fd561f63a2a541197c48703d5092793ad0124448d99a79928a0cfcdb1ae03827bcd6e
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09

Version Info:
0: [No Data]

Generic.Dacic.94CCEEA9.A.7AEF34A4 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Generic.Dacic.94CCEEA9.A.7AEF34A4
FireEye	Generic.mg.6296ae02e338fe5c
CAT-QuickHeal	Trojan.MuldVMF.S21469993
Skyhigh	BehavesLike.Win32.VBObfus.ct
ALYac	Generic.Dacic.94CCEEA9.A.7AEF34A4
Malwarebytes	Malware.AI.27455119
VIPRE	Generic.Dacic.94CCEEA9.A.7AEF34A4
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	P2PWorm ( 0059beb31 )
K7GW	P2PWorm ( 0059beb31 )
Cybereason	malicious.e82954
Arcabit	Generic.Dacic.94CCEEA9.A.7AEF34A4
VirIT	Trojan.Win32.VBUCornT.DRP
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik.FNGV
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agent.xbghpm
BitDefender	Generic.Dacic.94CCEEA9.A.7AEF34A4
NANO-Antivirus	Trojan.Win32.Banker1.fnwqkb
Avast	Win32:VB-AJKU [Trj]
Tencent	Trojan.Win32.Kryptik.hbb
TACHYON	Trojan/W32.VB-Agent.188432.G
Emsisoft	Generic.Dacic.94CCEEA9.A.7AEF34A4 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	Trojan.MulDrop17.61497
TrendMicro	TROJ_GEN.R03BC0PKH23
Sophos	ML/PE-A
Ikarus	Trojan.Crypt
Jiangmin	Trojan.VB.aqyg
Google	Detected
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	GrayWare/Win32.VP2.a
Kingsoft	malware.kb.a.1000
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Trojan.Win32.Agent.xbghpm
GData	Win32.Trojan.VBClone.C
Varist	W32/VB_Troj.J.gen!Eldorado
AhnLab-V3	Trojan/Win.Agent.R606385
Acronis	suspicious
McAfee	GenericRXHA-ZI!6296AE02E338
MAX	malware (ai score=83)
VBA32	SScope.Trojan.VB
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BC0PKH23
Rising	Trojan.VBClone!1.E032 (CLASSIC)
Yandex	Trojan.Agent!X1Ps5qmRiuI
SentinelOne	Static AI – Malicious PE
MaxSecure	Virus.W32.GenericML.xnet
Fortinet	W32/VBClone.D!tr
BitDefenderTheta	Gen:NN.ZevbaF.36792.lmW@amTrrWb
AVG	Win32:VB-AJKU [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Generic.Dacic.94CCEEA9.A.7AEF34A4?

Generic.Dacic.94CCEEA9.A.7AEF34A4 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X