Win32/Injector.EOPV (file analysis)

The Win32/Injector.EOPV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.EOPV virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.EOPV?


File Info:
crc32: EA50709E
md5: 50346407912f1c64b4b3f50de07dbabd
name: 50346407912F1C64B4B3F50DE07DBABD.mlw
sha1: 57abe11c9ea2cdc7f007d218135b5039ed052ab7
sha256: dd134b6fe92b24b9ac819feb43eaa9ed2ac5aa8891f711bde97760cc42001088
sha512: 99aac53a4f55193f8e6d2692d462aec1b88ef719de953b631e00b3e24bd01ed98bcdb179b51ae641bc34316a78483570ee1179cf6a9215738b7935d7bb482395
ssdeep: 24576:sGAy9rS4DPIUIhKbWmzFUQzvFKycNTmREa:sgpS4DPItcBLzF6NT8P
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright UNSC
FileVersion: 59.64.17.62
CompanyName: fuel-air explosive
LegalTrademarks: Khoshot
Comments: Barton's echidna
ProductName: edgy
FileDescription: anthrax
Translation: 0x0409 0x04e4

Win32/Injector.EOPV also known as:

Bkav	W32.AIDetectGBM.malware.02
Elastic	malicious (high confidence)
MicroWorld-eScan	Zum.Androm.1
FireEye	Generic.mg.50346407912f1c64
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Zum.Androm.1
Cybereason	malicious.7912f1
Cyren	W32/Injector.AEW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMetagen [Malware]
ClamAV	Win.Dropper.Temonde-6571898-0
Kaspersky	UDS:DangerousObject.Multi.Generic
Emsisoft	Zum.Androm.1 (B)
McAfee-GW-Edition	BehavesLike.Win32.Vopak.bc
Ikarus	Win32.SuspectCrc
Webroot	W32.Trojan.Gen
Microsoft	Trojan:Win32/Wacatac.DD!ml
Gridinsoft	Trojan.Win32.Downloader.oa!s1
Arcabit	Zum.Androm.1
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Zum.Androm.1
Cynet	Malicious (score: 100)
McAfee	Artemis!50346407912F
MAX	malware (ai score=85)
Malwarebytes	Malware.Heuristic.1001
ESET-NOD32	a variant of Win32/Injector.EOPV
Rising	Trojan.Generic@ML.80 (RDML:A/uu468MjtiuWpvh/Hs0gA)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Injector.EONL!tr
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)
Qihoo-360	HEUR/QVM20.1.651B.Malware.Gen

How to remove Win32/Injector.EOPV?

Win32/Injector.EOPV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X