Malware

What is “Generic.Mulinex.4EF085CD”?

Malware Removal

The Generic.Mulinex.4EF085CD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generic.Mulinex.4EF085CD virus can do?

  • At least one process apparently crashed during execution
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Presents an Authenticode digital signature
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Generic.Mulinex.4EF085CD?



File Info:

name: 46E97378C5C6463C8CF9.mlw
path: /opt/CAPEv2/storage/binaries/52a45163d61ebbee3bce5ad045fda83e98c399102d81ea1a621d528839e86342
crc32: 1EB0E991
md5: 46e97378c5c6463c8cf9b4b29339c2a2
sha1: e042ee88ea50395d13c186510c93e26fe4080873
sha256: 52a45163d61ebbee3bce5ad045fda83e98c399102d81ea1a621d528839e86342
sha512: b6bf58fa16a670ecc212a4ddcfa52de136ad10df09120a3387355c40918783b450c520127cc0623ba7f626f04a934d7924fc958639d037119307174e6a86dda7
ssdeep: 12288:ag0kk4Mqqi4XuuJwtPslNP38wwio8hWs8qaOG7xw:h0qoRwtEz8wfo8LaOGdw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FAC4121F261494A1D88C8C30C9A78AB96E24FD52CD416A8FFAB47F4E3D367C0B11658F
sha3_384: a22ae7343f211d14143bf7ad9ae4769f928b574d4b7870513b38a47fecd8973cdd401f9b8635b322246b540572dd5ec3
ep_bytes: 60be00604d008dbe00b0f2ff5783cdff
timestamp: 2021-12-10 19:21:15


Version Info:

CompanyName: Babylon Software Ltd.
FileDescription: Babylon Setup SE
FileVersion: 10.1.0.0
InternalName: Setup Stub
LegalCopyright: Copyright © Babylon Software Ltd. 1997-2016
OriginalFilename: SetupStub.exe
ProductName: Babylon Setup
ProductVersion: 10.1.0.0
Translation: 0x0409 0x04b0

Generic.Mulinex.4EF085CD also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Mulinex.4EF085CD
FireEyeGeneric.mg.46e97378c5c6463c
CAT-QuickHealPUA.BitminRI.S9338387
McAfeeArtemis!46E97378C5C6
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005246d51 )
K7GWTrojan ( 005246d51 )
Cybereasonmalicious.8c5c64
BitDefenderThetaGen:NN.ZexaF.34084.ImLfaWqW6Iaj
CyrenW32/Trojan.CLL.gen!Eldorado
SymantecMiner.XMRig
ESET-NOD32a variant of Win32/CoinMiner.BUF
APEXMalicious
ClamAVMultios.Coinminer.Miner-6781728-2
Kasperskynot-a-virus:HEUR:RiskTool.Win32.BitMiner.gen
BitDefenderGeneric.Mulinex.4EF085CD
AvastWin32:CoinMiner-M [Trj]
Ad-AwareGeneric.Mulinex.4EF085CD
SophosML/PE-A + Troj/Agent-BCPO
ComodoTrojWare.Win32.Agent.OSCF@5rs7jr
BaiduWin32.Trojan.Farfli.e
McAfee-GW-EditionArtemis!Trojan
EmsisoftGeneric.Mulinex.4EF085CD (B)
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.12FI8JT
JiangminTrojan.Miner.mmk
eGambitUnsafe.AI_Score_99%
AviraHEUR/AGEN.1136186
Antiy-AVLTrojan/Generic.ASCommon.FA
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
Acronissuspicious
ALYacGeneric.Mulinex.4EF085CD
MAXmalware (ai score=89)
VBA32BScope.Backdoor.Poison
MalwarebytesRiskWare.BitCoinMiner
RisingMalware.Heuristic!ET#98% (RDMK:cmRtazoh3vev46Q77jxh0mKmVmVa)
YandexTrojan.GenAsa!CnhHeVv4fes
IkarusWorm.Win32.Nuj
FortinetW32/CoinMiner.ELG!tr.pws
AVGWin32:CoinMiner-M [Trj]
PandaTrj/Genetic.gen

How to remove Generic.Mulinex.4EF085CD?

Generic.Mulinex.4EF085CD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment