Generic.Mulinex.C9D95C3D (file analysis)

The Generic.Mulinex.C9D95C3D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Mulinex.C9D95C3D virus can do?

Executable code extraction
Creates RWX memory
Expresses interest in specific running processes
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
A scripting utility was executed
Uses Windows utilities for basic functionality
A process attempted to delay the analysis task by a long amount of time.
Empties the Recycle Bin, indicative of ransomware
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.Mulinex.C9D95C3D?


File Info:
crc32: D6345BA0
md5: f0577a48d5f9ec267b2a3d77e56932aa
name: SQLAGENTIDC.exe
sha1: c8cfe680e6f4fa1266764845f102af2897aa8933
sha256: f273ff2db2c8e073a050ddd3c6c564f6dd67c669a30f20a83b973c44e27ae657
sha512: a0342661d08c6b9e04bb3e51098b5eb729834123ff252ceb79ad85b6fb6e955b77de54b9af36d291aebf0d4d4f05ebcd95953593fd635aa88dad180e967e4867
ssdeep: 12288:AAsjmBQyLmzkOlzPvm0Ad2X9l2QL5Lag+VcKYwU15vNO7l:AHjYmzkS7Nl245mg+owmNO7l
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright (C) 2015 CHINA CITIC BANK.
InternalName: update.exe
FileVersion: 1.2.0.0720
CompanyName: x4e2dx4fe1x94f6x884c
Comments: x4e2dx4fe1x94f6x884cx7f51x94f6x4f34x4fa3
ProductName: update.exe
ProductVersion: 1.2.0.0720
FileDescription: x7f51x94f6x4f34x4fa3x5347x7ea7x7a0bx5e8f
OriginalFilename: update.exe
Translation: 0x0804 0x03a8

Generic.Mulinex.C9D95C3D also known as:

Bkav	W32.AIDetectVM.malware2
DrWeb	Trojan.BtcMine.3404
MicroWorld-eScan	Generic.Mulinex.C9D95C3D
FireEye	Generic.mg.f0577a48d5f9ec26
CAT-QuickHeal	PUA.BitminRI.S9338387
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 00561c1b1 )
BitDefender	Generic.Mulinex.C9D95C3D
K7GW	Trojan ( 00561c1b1 )
Cybereason	malicious.8d5f9e
Arcabit	Generic.Mulinex.C9D95C3D
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.34100.HmKfaW@77Vhj
F-Prot	W32/Trojan.CLL.gen!Eldorado
Symantec	Miner.XMRig
APEX	Malicious
ClamAV	Win.Malware.Midie-7357494-0
GData	Generic.Mulinex.C9D95C3D
Kaspersky	Trojan-Downloader.Win32.Bitmin.xwy
Rising	Backdoor.Agent!1.B7E4 (RDMK:cmRtazrJjHMYpbCGO/JZDyHpOyxa)
Ad-Aware	Generic.Mulinex.C9D95C3D
Sophos	Troj/Agent-BCPO
F-Secure	Heuristic.HEUR/AGEN.1046199
Zillya	Trojan.CoinMiner.Win32.25455
Trapmine	malicious.high.ml.score
Emsisoft	Generic.Mulinex.C9D95C3D (B)
Ikarus	Trojan.Win32.CoinMiner
Cyren	W32/Trojan.CLL.gen!Eldorado
Jiangmin	TrojanDownloader.Bitmin.mz
eGambit	Unsafe.AI_Score_99%
Avira	HEUR/AGEN.1046199
MAX	malware (ai score=89)
Antiy-AVL	Trojan[Downloader]/Win32.Upatre
Microsoft	Trojan:Win32/Coinminer.PA!MTB
Endgame	malicious (moderate confidence)
ZoneAlarm	Trojan-Downloader.Win32.Bitmin.xwy
AhnLab-V3	Malware/Win32.RL_Coinminer.R328898
Acronis	suspicious
VBA32	BScope.Trojan.CMY3U
ALYac	Generic.Mulinex.C9D95C3D
Malwarebytes	RiskWare.BitCoinMiner
ESET-NOD32	a variant of Win32/CoinMiner.BUF
Yandex	Trojan.CoinMiner!aW1qAi1rDo4
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/QQWare.A!tr
Webroot	W32.Malware.Gen
AVG	Win32:CoinMiner-M [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_80% (D)

How to remove Generic.Mulinex.C9D95C3D?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic.Mulinex.C9D95C3D (file analysis)