Categories: Ransom

Ransom:Win32/Maze removal

The Ransom:Win32/Maze is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:Win32/Maze virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Exhibits possible ransomware file modification behavior
Writes a potential ransom message to disk

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ransom:Win32/Maze?


File Info:
crc32: 3E6FD65Fmd5: f83fb9ce6a83da58b20685c1d7e1e546name: F83FB9CE6A83DA58B20685C1D7E1E546.mlwsha1: 01c459b549c1c2a68208d38d4ba5e36d29212a4fsha256: e8a091a84dd2ea7ee429135ff48e9f48f7787637ccb79f6c3eb42f34588bc684sha512: 934ec9073a28b90e8df785bef49f224789da59f83729208b92dba0503e2894b3f48ed04b20de1ba49374b1cd26f0c87e8e5ab79e817258135e3be2c171f3f396ssdeep: 12288:v6l/7FpnaeoQbRLBYdunMCayql4YcQD+AgJbAWgjbgpQ:CDna43YAKl4Yci+AggEpQtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ransom:Win32/Maze also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
ClamAV	Win.Ransomware.Maze-7473753-0
CAT-QuickHeal	Trojan.GenRI.S12518988
McAfee	Ransomware-GOO!F83FB9CE6A83
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Gen.j!c
Sangfor	Malware
K7AntiVirus	Trojan ( 00564f7e1 )
BitDefender	DeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
K7GW	Trojan ( 00564f7e1 )
Cybereason	malicious.e6a83d
Arcabit	DeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
Invincea	Mal/Generic-R + Troj/Ransom-FLM
Cyren	W32/Ransom.CRIB-3160
Symantec	Trojan.Gen.2
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Gen.qqa
Alibaba	Ransom:Win32/Kryptik.087ade8f
NANO-Antivirus	Trojan.Win32.Kryptik.fqtcyq
ViRobot	Trojan.Win32.S.MazeRansom.484352
MicroWorld-eScan	DeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
Tencent	Win32.Trojan.Gen.Eckd
Ad-Aware	DeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
Emsisoft	DeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2 (B)
Comodo	ApplicUnwnt@#34bwda28zolzm
F-Secure	Heuristic.HEUR/AGEN.1106546
DrWeb	Trojan.Siggen8.30087
Zillya	Trojan.Gen.Win32.2148
TrendMicro	Ransom.Win32.MAZE.H
McAfee-GW-Edition	BehavesLike.Win32.Adopshel.gc
FireEye	Generic.mg.f83fb9ce6a83da58
Sophos	Troj/Ransom-FLM
SentinelOne	DFI – Malicious PE
Jiangmin	Trojan.Gen.aeb
Webroot	W32.Trojan.Ransom
Avira	HEUR/AGEN.1106546
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Ransom]/Win32.Gen
Microsoft	Ransom:Win32/Maze
ZoneAlarm	Trojan-Ransom.Win32.Gen.qqa
GData	DeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
AhnLab-V3	Trojan/Win32.MazeRansom.R272934
Acronis	suspicious
BitDefenderTheta	AI:Packer.83513CFF1E
ALYac	Trojan.Ransom.ChaCha
TACHYON	Ransom/W32.Maze.484352
VBA32	BScope.Trojan.Wacatac
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.HDBT
TrendMicro-HouseCall	Ransom.Win32.MAZE.H
Rising	Ransom.Maze!1.B8D7 (CLASSIC)
Yandex	Trojan.Gen!xihd/J8az9U
Ikarus	Trojan.Win32.Crypt
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/GenKryptik.DJDC!tr
AVG	Win32:Adware-gen [Adw]
Avast	Win32:Adware-gen [Adw]
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	HEUR/QVM10.2.7AD9.Malware.Gen