Trojan.Heur.GM.0004472820 malicious file

The Trojan.Heur.GM.0004472820 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Heur.GM.0004472820 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Heur.GM.0004472820?


File Info:
name: F7EFC9EA0ABD2CDE8429.mlw
path: /opt/CAPEv2/storage/binaries/bbf51373b0de2b874a15590a2cce046668102c08a0124978d4dfdc17e1af92d2
crc32: 87701A9D
md5: f7efc9ea0abd2cde8429a544a88a7f43
sha1: 1305c47897b2bb5f0500e385d0cd6499335043c8
sha256: bbf51373b0de2b874a15590a2cce046668102c08a0124978d4dfdc17e1af92d2
sha512: eb3e5ec5d5aec3d2f0a4b06ffc1cb770c2f30756c9521711bf10c3fe4612eba4350bdba3577d1fcfd6b4b7e6c44902577dd4a482f18d07c222e4c7ae12f4e4c0
ssdeep: 1536:UmBVr2j9rR9EDaol+Vf6hqOve3994kCO1mw7BXtYKt7C:UUCj94jl+Vf6hqOve3994kCO139Yc7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17D63C0177CD1CA23C480417050E58B277F3FA5392AA69453F744ADEF2FBA2C0997A396
sha3_384: b6791b3284d2bd0876212cb2b2d05e0f793610a92b86211d5253f763e4d115a369e7fbf86e9bff47ede0bd9677c0607c
ep_bytes: 5c13fcff080f85fa000000a1b09b4000
timestamp: 2005-03-17 10:59:02

Version Info:
0: [No Data]

Trojan.Heur.GM.0004472820 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.GM.0004472820
FireEye	Generic.mg.f7efc9ea0abd2cde
Skyhigh	BehavesLike.Win32.RAHack.km
ALYac	Gen:Trojan.Heur.GM.0004472820
Sangfor	Suspicious.Win32.Save.ins
Cybereason	malicious.897b2b
Arcabit	Trojan.Heur.GM.D443FF4
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	Packed.Win32.CryptExe.gen
BitDefender	Gen:Trojan.Heur.GM.0004472820
Avast	Win32:Evo-gen [Trj]
Sophos	ML/PE-A
F-Secure	Trojan.TR/Crypt.XPACK.Gen
VIPRE	Gen:Trojan.Heur.GM.0004472820
TrendMicro	Possible_Virus
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Trojan.Heur.GM.0004472820 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Small.brwp
Varist	W32/Downloader.YXVI-1021
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=85)
Antiy-AVL	Trojan[Packed]/Win32.CryptExe
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Packed.Win32.CryptExe.gen
GData	Gen:Trojan.Heur.GM.0004472820
Google	Detected
AhnLab-V3	Worm/Win32.IRCBot.C25447
McAfee	Artemis!F7EFC9EA0ABD
Cylance	unsafe
Zoner	Probably Heur.ExeHeaderL
TrendMicro-HouseCall	Possible_Virus
Rising	Trojan.Generic@AI.100 (RDML:T63LB3aue+/q2GafDck+RQ)
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	AI:Packer.A60263341D
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.Heur.GM.0004472820?

Trojan.Heur.GM.0004472820 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X