PUA.WacapewVMF.S19740905 malicious file

The PUA.WacapewVMF.S19740905 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.WacapewVMF.S19740905 virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine PUA.WacapewVMF.S19740905?


File Info:
crc32: 744B35B7
md5: a91dd9cfa34b1a171f26e337b6af0268
name: A91DD9CFA34B1A171F26E337B6AF0268.mlw
sha1: 6fe7064b0c7299ee0d4b8afc5f19ace85a86e23a
sha256: f3addb6658086aa44450b4f64a8722862c8c5639fa81cedcdd604f36a2ba0273
sha512: a87a7426c74ed90176a768e5e5d9b0ab2b0c9ceac55a170fd6a4e333bfd3ec7a32f43a4f52bec4017407e4c783d4869d5405f247318310575b5f70c417b4dbaf
ssdeep: 1536:/irk4xKQNIMMYxQ6xWq768nAQPDsoOaPkYqppvHrPNT617Yw7D24Ytnb6559rRo:RGPPDCAu059rRodcVAGQqqck1MnoU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Areef Arafat 0599357258
InternalName: Form11
FileVersion: 1.00
CompanyName: Microsoft
Comments: Sip Cracker
ProductName: Sip Cracker
ProductVersion: 1.00
FileDescription: Find User&Pass 4 Sip
OriginalFilename: Form11.exe

PUA.WacapewVMF.S19740905 also known as:

Lionic	Trojan.Win32.Ranapama.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoad4.1738
Cynet	Malicious (score: 99)
CAT-QuickHeal	PUA.WacapewVMF.S19740905
ALYac	Trojan.Ranapama.AJM
Cylance	Unsafe
Zillya	Tool.SIPCrack.Win32.14
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.fa34b1
Cyren	W32/S-6b0596fd!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/HackTool.SIPCrack.A potentially unsafe
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Virus.Sality-6828382-0
BitDefender	Trojan.Ranapama.AJM
MicroWorld-eScan	Trojan.Ranapama.AJM
Tencent	Win32.Trojan.Graftor.Llhd
Ad-Aware	Trojan.Ranapama.AJM
Sophos	Generic PUA GP (PUA)
Comodo	Application.Win32.HackTool.SIPCrack.A@7cn3ep
BitDefenderTheta	Gen:NN.ZevbaF.34236.rm0@aWGM!Bni
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXAT-XF!A91DD9CFA34B
FireEye	Trojan.Ranapama.AJM
Emsisoft	Trojan.Ranapama.AJM (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Malware.Gen
Avira	TR/Graftor.pqienh
Antiy-AVL	Trojan/Generic.ASMalwS.23E4783
Microsoft	Trojan:Win32/Wacatac.A!ml
Arcabit	Trojan.Ranapama.AJM
SUPERAntiSpyware	Trojan.Agent/Gen-Artemis
GData	Trojan.Ranapama.AJM
AhnLab-V3	Trojan/Win32.Graftor.R285048
McAfee	GenericRXAT-XF!A91DD9CFA34B
MAX	malware (ai score=80)
VBA32	TScope.Trojan.VB
Yandex	Trojan.GenAsa!I+AA32xWGKk
Ikarus	Trojan.Graftor
MaxSecure	Trojan.Malware.10581598.susgen
Fortinet	W32/Agent.ART!tr
AVG	Win32:Malware-gen

How to remove PUA.WacapewVMF.S19740905?

PUA.WacapewVMF.S19740905 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X