Categories: Adware

Dropped:Adware.Generic.53397 malicious file

The Dropped:Adware.Generic.53397 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Adware.Generic.53397 virus can do?

Sample contains Overlay data
Yara rule detections observed from a process memory dump/dropped files/CAPE
Reads data out of its own binary image
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Attempts to modify proxy settings
Harvests cookies for information gathering
Collects information to fingerprint the system
Uses suspicious command line tools or Windows utilities

How to determine Dropped:Adware.Generic.53397?


File Info:
name: FE6E8D82B3E38DB5B691.mlwpath: /opt/CAPEv2/storage/binaries/0b3093a34e2fd722eafc910447311c35ed9105860fe33e899c46087a1bd3c3a8crc32: 949805D1md5: fe6e8d82b3e38db5b691d76d81508847sha1: 06c541574300315cba3a31d83387477e7454b705sha256: 0b3093a34e2fd722eafc910447311c35ed9105860fe33e899c46087a1bd3c3a8sha512: a968a7a2918dad0cf50b0c56b9c6a6f9ced8449245d06bab0858262f7fdc4d42e6a74f7479d9940aee9bb8e8c7b7f08578f6ce8bc008937c7519064c00c85d93ssdeep: 3072:BgEeb0dlHYZwLUCxYLNTtwa9WYStW9c4hC7h79bF9y4:BgEsZQud9rTsV7xF9Dtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T14ED31209E3906C57DAA01CB90602B9E72AE5B065628B5FBC2FFD1C0021F66FF4DD061Bsha3_384: 9ebd4efa871908f71d1575382bad547a39cd99b2e9f02d05519d07cc529686e6fcd750dfae42af79300e40bf6c6bf3a8ep_bytes: 60be00d040008dbe0040ffff5783cdfftimestamp: 2005-01-03 18:52:21
Version Info:
0: [No Data]

Dropped:Adware.Generic.53397 also known as:

Lionic	Heuristic.File.Generic.00×1!p
MicroWorld-eScan	Dropped:Adware.Generic.53397
FireEye	Generic.mg.fe6e8d82b3e38db5
CAT-QuickHeal	Trojan.GenericPMF.S20253704
McAfee	Adware-WinAd.ac.dr
Cylance	Unsafe
VIPRE	Dropped:Adware.Generic.53397
K7AntiVirus	Adware ( 004bb0391 )
Alibaba	Trojan:Win32/Occamy.cd049fd7
K7GW	Adware ( 004bb0391 )
Cybereason	malicious.2b3e38
Cyren	W32/Risk.XKCC-8657
Symantec	Adware.WinTaskAd
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/Adware.WUpd
APEX	Malicious
ClamAV	Win.Adware.Winad-15
Kaspersky	not-a-virus:AdWare.Win32.WinAD.i
BitDefender	Dropped:Adware.Generic.53397
NANO-Antivirus	Riskware.Win32.WinAD.bmscm
Avast	Win32:Adware-gen [Adw]
Rising	ADWare.WinAD.j (CLOUD)
Ad-Aware	Dropped:Adware.Generic.53397
Sophos	WinAd Installer (PUA)
Comodo	Application.Win32.Adware.WUpd@1m8v
DrWeb	Adware.Winad
Zillya	Adware.WinAD.Win32.37
TrendMicro	ADW_WUPD.E
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
Trapmine	malicious.high.ml.score
Emsisoft	Dropped:Adware.Generic.53397 (B)
SentinelOne	Static AI – Malicious PE
GData	Dropped:Adware.Generic.53397
Jiangmin	Adware/WinAD.k
Webroot	Adware:Win32/Windupdates.A
Google	Detected
Avira	TR/Drop.WinAD.F.4
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwS.2A6
Kingsoft	Win32.Troj.WinAD.i.(kcloud)
ZoneAlarm	not-a-virus:AdWare.Win32.WinAD.i
Microsoft	Trojan:AndroidOS/Mploit!rfn
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.Generic.R426433
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34606.imHfaKwqChfi
ALYac	Dropped:Adware.Generic.53397
TACHYON	Trojan-Spy/W32.Winad.176249
VBA32	AdWare.WinAD
Malwarebytes	Malware.Heuristic.1003
TrendMicro-HouseCall	ADW_WUPD.E
Tencent	Win32.Adware.Winad.Efus
Yandex	Trojan.GenAsa!zoLDxZ/x9wA
Ikarus	not-a-virus:AdWare.Win32.WinAD
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/WUpd
AVG	Win32:Adware-gen [Adw]
CrowdStrike	win/malicious_confidence_70% (W)