Malware

Generic.DataStealer.1.CF445D36 removal

Malware Removal

The Generic.DataStealer.1.CF445D36 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.DataStealer.1.CF445D36 virus can do?

  • Authenticode signature is invalid
  • CAPE detected the Caliber malware family
  • Binary compilation timestomping detected

How to determine Generic.DataStealer.1.CF445D36?


File Info:

name: CFA79FB3F8739996EA45.mlw
path: /opt/CAPEv2/storage/binaries/bfa181f9181607303f508b4714a74719a9d80dc3615c00ce2280e8b71b41a91b
crc32: 1B62B693
md5: cfa79fb3f8739996ea45f87e02935ea4
sha1: b81ebb666d223df27d5b4e55d10cf4602bb19199
sha256: bfa181f9181607303f508b4714a74719a9d80dc3615c00ce2280e8b71b41a91b
sha512: 4544c6d08a75feff3f43566e270ebf008b07d2923b38ac79658cb82c7136b7edfed5fb2ea2083087c0f2a065e5f768adef59f4d906ea90887233f1f180e1f58f
ssdeep: 6144:Wf+BLtABPDslRpZrQWT0IQZQZ9afTy8lI1D0avK:1lmK0IQZQdx1DFK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T192544C0027EC8B56E2FF4BB9E4B01261C3B1B456B83EDB4E6D4461DE2923780D955BB3
sha3_384: c65591a1e6ded27521d1969eac3cdf20ae0ecf204052a89ba47f7e2d067ddf251d04e72a6bcde34a35deeaacf402f055
ep_bytes: ff250020400000000000101112000807
timestamp: 2056-11-08 17:38:25

Version Info:

Translation: 0x0000 0x04b0
Comments: 44 CALIBER
CompanyName: 44 CALIBER
FileDescription: 44 CALIBER
FileVersion: 1.6.2.0
InternalName: Insidious.exe
LegalCopyright: FuckTheSystem Copyright © 2021
LegalTrademarks:
OriginalFilename: Insidious.exe
ProductName: 44 CALIBER
ProductVersion: 1.6.2.0
Assembly Version: 1.6.2.0

Generic.DataStealer.1.CF445D36 also known as:

BkavW32.Common.F114450C
LionicTrojan.Win32.Stealer.12!c
MicroWorld-eScanGeneric.DataStealer.1.CF445D36
ClamAVWin.Packed.Datastealer-9856291-0
FireEyeGeneric.mg.cfa79fb3f8739996
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
McAfeeA310Logger!CFA79FB3F873
MalwarebytesCoinStealer.Spyware.Stealer.DDS
VIPREGeneric.DataStealer.1.CF445D36
SangforTrojan.Win32.Save.a
K7AntiVirusPassword-Stealer ( 005282e41 )
AlibabaTrojanPSW:MSIL/Stealgen.6b7be2aa
K7GWPassword-Stealer ( 005282e41 )
Cybereasonmalicious.66d223
VirITTrojan.Win32.GenusT.DNNN
CyrenW32/CoinMiner.FA.gen!Eldorado
SymantecInfostealer.Calibous
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/PSW.CoinStealer.CC
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-PSW.MSIL.Stealer.gen
BitDefenderGeneric.DataStealer.1.CF445D36
SUPERAntiSpywareTrojan.Agent/Gen-Stealer
AvastWin32:MalwareX-gen [Trj]
TencentTrojan-Spy.Win32.Stealer.16000599
SophosTroj/Steal-CJF
F-SecureHeuristic.HEUR/AGEN.1307083
DrWebTrojan.PWS.StealerNET.76
TrendMicroTROJ_GEN.R002C0DHF23
McAfee-GW-EditionA310Logger!CFA79FB3F873
EmsisoftTrojan-PSW.Agent (A)
IkarusTrojan.MSIL.PSW
GDataMSIL.Trojan-Stealer.CaliberStealer.B
AviraHEUR/AGEN.1307083
ArcabitGeneric.DataStealer.1.CF445D36
ZoneAlarmHEUR:Trojan-PSW.MSIL.Stealer.gen
MicrosoftPWS:MSIL/Stealgen.GA!MTB
GoogleDetected
AhnLab-V3Infostealer/Win.CALIBER.R513735
BitDefenderThetaGen:NN.ZemsilF.36662.rm0@aaPsR3b
ALYacGeneric.DataStealer.1.CF445D36
MAXmalware (ai score=81)
VBA32Trojan.MSIL.InfoStealer.gen.D
Cylanceunsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0DHF23
RisingStealer.Agent!1.D483 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.RML!tr
AVGWin32:MalwareX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Generic.DataStealer.1.CF445D36?

Generic.DataStealer.1.CF445D36 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment