Generic.EmotetU.EE619FAF (file analysis)

The Generic.EmotetU.EE619FAF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.EmotetU.EE619FAF virus can do?

Executable code extraction
Creates RWX memory
Attempts to repeatedly call a single API many times in order to delay analysis time
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Generic.EmotetU.EE619FAF?


File Info:
crc32: 3DF78307
md5: 9af17eb5b7c1c9c42ff91db8ed35c733
name: 9AF17EB5B7C1C9C42FF91DB8ED35C733.mlw
sha1: 09eda24e4ee87f7f71b0397f7374570fc4503869
sha256: e31bee33fb75027801a8aca1d51d01f20e16b7de1983406ba1020d8f266a67a0
sha512: 6ca8d0b3b03eddbd8afc2b1d87e8dd19bd7b6d2f8e5692deb80d97753b9ff89ef444437a268d7e99376381f9b749a75ff274a622acd6e0279a663edf5bf40af2
ssdeep: 6144:kyUlS/QF5KwV5AAMFbEiQGy/+ZjNwgw6RITwJr63tOTp8N:eShwV5AAGbEiJy/QdRk9+p
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation.  All rights reserved.
InternalName: CmnCtrl1
FileVersion: 1, 0, 0, 1
ProductName: CmnCtrl1 Application
ProductVersion: 1, 0, 0, 1
FileDescription: CmnCtrl1 MFC Application
OriginalFilename: CmnCtrl1.EXE
Translation: 0x0409 0x04b0

Generic.EmotetU.EE619FAF also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	DeepScan:Generic.EmotetU.EE619FAF
FireEye	Generic.mg.9af17eb5b7c1c9c4
McAfee	Emotet-FRD!9AF17EB5B7C1
BitDefender	DeepScan:Generic.EmotetU.EE619FAF
Cyren	W32/Trickbot.EJ.gen!Eldorado
Symantec	Trojan.Emotet
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
ClamAV	Win.Packed.Emotet-9789163-0
Kaspersky	HEUR:Backdoor.Win32.Emotet.vho
Tencent	Malware.Win32.Gencirc.11b10f48
Ad-Aware	DeepScan:Generic.EmotetU.EE619FAF
Emsisoft	Trojan.Emotet (A)
DrWeb	Trojan.Emotet.982
Invincea	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Emotet.gh
Jiangmin	Backdoor.Emotet.kx
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Emotet.PSO!MTB
Arcabit	DeepScan:Generic.EmotetU.EE619FAF
ZoneAlarm	HEUR:Backdoor.Win32.Emotet.vho
GData	DeepScan:Generic.EmotetU.EE619FAF
Cynet	Malicious (score: 100)
ESET-NOD32	a variant of Win32/Kryptik.HEOE
VBA32	BScope.TrojanBanker.Emotet
ALYac	DeepScan:Generic.EmotetU.EE619FAF
Malwarebytes	Trojan.MalPack.TRE
Rising	Trojan.Kryptik!1.C83F (CLASSIC)
Ikarus	Worm.Win32.Agent
Fortinet	W32/Kryptik.HEOE!tr
AVG	Win32:MalwareX-gen [Trj]

How to remove Generic.EmotetU.EE619FAF?

Generic.EmotetU.EE619FAF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X