Malware

Generic.Exploit.Shellcode.2.C786A399 information

Malware Removal

The Generic.Exploit.Shellcode.2.C786A399 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Exploit.Shellcode.2.C786A399 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

Related domains:

wpad.local-net

How to determine Generic.Exploit.Shellcode.2.C786A399?


File Info:

name: 243981A32626E92B04CF.mlw
path: /opt/CAPEv2/storage/binaries/01c38c7931d3d8ca012f67cf5a2b637e22e6d4714bfa820e48c50e591885599e
crc32: 9FB15A93
md5: 243981a32626e92b04cf882903b259c1
sha1: 21ec9597f70674017aa94add8abbeb6f7cb6a0e1
sha256: 01c38c7931d3d8ca012f67cf5a2b637e22e6d4714bfa820e48c50e591885599e
sha512: 2b9176c2466f9d4e2ac5d8a2115f5ffe503410397222ac8f9147ccfb2e28dee577cf872e8a51b1e458621b862f50d2b7f499a1681f9e5b68ce97f0ee835c8852
ssdeep: 49152:xp68meuTkBD5pplYSRax7SoJf+wmjSubjTZmPbNM:acuTk2xNLmmubYP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T119E57E13B348663EC07B0A3A95379A949D3F7B712A16DC1B6FF4095C8E356402E3E61B
sha3_384: 66f40cb7c390beb8caa6d3e8f2d99bdd6526fae61a051b59fd9e6e16fba93e17dfeacd683dfebf918de6bdc6cebf2ea0
ep_bytes: 558bec83c4e833c08945e88945ecb8b0
timestamp: 2021-11-22 22:11:59

Version Info:

FileDescription: Warpack.Next
FileVersion: 3.0.0.68
ProgramID: Warpack.Next
ProductName: Warpack.Next
ProductVersion: 3.0.0.0
Translation: 0x0409 0x04e4

Generic.Exploit.Shellcode.2.C786A399 also known as:

MicroWorld-eScanDeepScan:Generic.Exploit.Shellcode.2.C786A399
Cybereasonmalicious.32626e
BitDefenderDeepScan:Generic.Exploit.Shellcode.2.C786A399
Ad-AwareDeepScan:Generic.Exploit.Shellcode.2.C786A399
EmsisoftDeepScan:Generic.Exploit.Shellcode.2.C786A399 (B)
FireEyeDeepScan:Generic.Exploit.Shellcode.2.C786A399
GDataDeepScan:Generic.Exploit.Shellcode.2.C786A399
ArcabitDeepScan:Generic.Exploit.Shellcode.2.C786A399
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ALYacDeepScan:Generic.Exploit.Shellcode.2.C786A399
MAXmalware (ai score=81)
RisingTrojan.Agent!1.C856 (CLASSIC)
eGambitUnsafe.AI_Score_93%
MaxSecureTrojan.Malware.300983.susgen

How to remove Generic.Exploit.Shellcode.2.C786A399?

Generic.Exploit.Shellcode.2.C786A399 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment