Generic.Exploit.Shellcode.RDI.3.7E49AB12 malicious file

The Generic.Exploit.Shellcode.RDI.3.7E49AB12 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Exploit.Shellcode.RDI.3.7E49AB12 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generic.Exploit.Shellcode.RDI.3.7E49AB12?


File Info:
name: 1BD1C21778DEDB4B4CB1.mlw
path: /opt/CAPEv2/storage/binaries/8d5838e7f185f59d8650f318db9df12aa47d9df91c2de861d6af83f1f2f8d6ad
crc32: 45E083CB
md5: 1bd1c21778dedb4b4cb18f4de236a874
sha1: e96ba5671faba41d33afd790e9177ac0389f3667
sha256: 8d5838e7f185f59d8650f318db9df12aa47d9df91c2de861d6af83f1f2f8d6ad
sha512: e72d924fcbbe0da81b5790b12b8706e87642091c205748b584bef383a880f2a16128619a1a927261e8df8f0bfecc9d0282f24e7b5e36beff1916effbf5662e75
ssdeep: 768:E02yJlBkkZISEMYevUBpJSY3WiLiFuDoY/OlUA2XxXhkRv4lMUshJ:E02yjfE7e8zL3xLiFMoY/OlUAM7lMR
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1A7F24C86E9A554E5DE3AE03EC5725626E5F1B86C17029BCF0334C8A95F237E0263F346
sha3_384: 2f799dd74e2e01482d1f6ee183cc330e8f8f42c5347350cba3291bb9106c695a8539dad8d710f43ca448af436d0026cd
ep_bytes: 48895c2408574883ec20488bda488bf9
timestamp: 2021-11-12 11:12:46

Version Info:
0: [No Data]

Generic.Exploit.Shellcode.RDI.3.7E49AB12 also known as:

MicroWorld-eScan	Generic.Exploit.Shellcode.RDI.3.7E49AB12
FireEye	Generic.Exploit.Shellcode.RDI.3.7E49AB12
Cybereason	malicious.778ded
ESET-NOD32	Win64/Rootkit.Agent.BB
Kaspersky	HEUR:Trojan.Win64.MalDrv.gen
BitDefender	Generic.Exploit.Shellcode.RDI.3.7E49AB12
Ad-Aware	Generic.Exploit.Shellcode.RDI.3.7E49AB12
Sophos	Mal/Rootkit-BC
Emsisoft	Generic.Exploit.Shellcode.RDI.3.7E49AB12 (B)
GData	Generic.Exploit.Shellcode.RDI.3.7E49AB12
Jiangmin	Rootkit.Agent.shk
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Generic.ASMalwS.347B847
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Cynet	Malicious (score: 100)
ALYac	Generic.Exploit.Shellcode.RDI.3.7E49AB12
Malwarebytes	Malware.AI.386245823
APEX	Malicious
Ikarus	Trojan.Win64.Rootkit
Fortinet	W64/RootKitAgent.BB!tr

How to remove Generic.Exploit.Shellcode.RDI.3.7E49AB12?

Generic.Exploit.Shellcode.RDI.3.7E49AB12 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X