Categories: Malware

Generic.DownloaderS.FE8E3321 (file analysis)

The Generic.DownloaderS.FE8E3321 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.DownloaderS.FE8E3321 virus can do?

Presents an Authenticode digital signature
Unconventionial language used in binary resources: Chinese (Simplified)
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.DownloaderS.FE8E3321?


File Info:
crc32: 09858361md5: 21d70a0ee75e7902178037072eb733f1name: 21D70A0EE75E7902178037072EB733F1.mlwsha1: b18f2a52f1478d2522341bb789566b48195239f2sha256: 75b873fe359bae41b5fd9a9354bad7d31b5efe62cce6cdb823d661f91a908a9bsha512: 17953e4068a1209b108c44323a87e899e12a421d1eb64024500876f93e0e8153e7c2c83e812dcac01421b7ba0e3cc017a2589ed533303de1b906d661a0760e52ssdeep: 12288:/QDhqHhZyNzF5EVtnS8wcMfNXMMEhJsCmJWBK3P9AEc:IWhoz8nYXtEhqCmJU0Rctype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2009 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.                                        InternalName: Setup                                        FileVersion: 2.01.0000                                       CompanyName: yulong                                                       Internal Build Number: 94573                                        ProductName: DRIVER                                               ProductVersion: 2.01.0000                                   FileDescription: Setup Launcher                                        OriginalFilename: Setup.exe                                        Translation: 0x0409 0x04b0

Generic.DownloaderS.FE8E3321 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader25.26103
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.Dynamer.29610
ALYac	DeepScan:Generic.DownloaderS.FE8E3321
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Backdoor:Win32/Farfli.a0ee9d6c
Cybereason	malicious.ee75e7
Baidu	Win32.Trojan.Farfli.bg
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.CDA
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Dupzom-6453732-2
Kaspersky	Backdoor.Win32.Farfli.afjh
BitDefender	DeepScan:Generic.DownloaderS.FE8E3321
NANO-Antivirus	Trojan.Win32.Farfli.ealxve
MicroWorld-eScan	DeepScan:Generic.DownloaderS.FE8E3321
Tencent	Malware.Win32.Gencirc.10b493e4
Ad-Aware	DeepScan:Generic.DownloaderS.FE8E3321
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.GameThief.Magania.~NWABU@18g2sq
BitDefenderTheta	Gen:NN.ZexaF.34684.xr2@aa!i@kmj
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXLZ-XN!21D70A0EE75E
FireEye	Generic.mg.21d70a0ee75e7902
Emsisoft	DeepScan:Generic.DownloaderS.FE8E3321 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor.Farfli.rn
Avira	HEUR/AGEN.1111360
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Backdoor.Win32.Farfli.afjh
GData	DeepScan:Generic.DownloaderS.FE8E3321
Acronis	suspicious
McAfee	GenericRXLZ-XN!21D70A0EE75E
MAX	malware (ai score=81)
VBA32	BScope.Trojan.Downloader
TrendMicro-HouseCall	TROJ_GEN.R035C0PDR21
Rising	Backdoor.Farfli!8.B4 (CLOUD)
Ikarus	Trojan.Win32.Farfli
Fortinet	W32/Agent.CBK!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml