Categories: Malware

Generic.GC.Downloader.4935590C information

The Generic.GC.Downloader.4935590C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.GC.Downloader.4935590C virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
At least one process apparently crashed during execution
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
HTTPS urls from behavior.
Drops a binary and executes it
Authenticode signature is invalid
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Operates on local firewall’s policies and settings
Creates a copy of itself
Attempts to disable System Restore
Attempts to modify or disable Security Center warnings

How to determine Generic.GC.Downloader.4935590C?


File Info:
name: 29E7B4B6CCBCFD7A09B0.mlwpath: /opt/CAPEv2/storage/binaries/d3e25eac45fbe545058197cbb6a61879444a7a51bd0358a50e2eb89b3280d13fcrc32: BE90F11Dmd5: 29e7b4b6ccbcfd7a09b0a905c89a62c3sha1: 71211244329c06d395d1af792d103ca9349fd736sha256: d3e25eac45fbe545058197cbb6a61879444a7a51bd0358a50e2eb89b3280d13fsha512: 184dd01f013715d0ce8ec20248f986815af4917fd8ed23b9e2bf42e8d126968e52c934aba93c1395a0d82f609cd2b072fb85eaa38778ebf8a863f41e863a0ac8ssdeep: 3072:zNIy4qbLqrVticc4eqVmpPI6i+f/YSqkLoG8fv9PeuzCTzLfdk8eoQYANBn:zd4rc4eAmpPI6OSTIfvLCTFk8eJYANBntype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A0C37D11B5C0C032E5B729315970EBB19ABDF8300E546DDF63981ABA1E306C19A39E7Bsha3_384: c9fa822c1d1106413a4810451262602fe2ea4ecf4ff4a6a28c96454d34056911d44ecc7b308b47ec1d3e4a493ae9f13bep_bytes: e8c5030000e97afeffff558bec6a00fftimestamp: 2021-12-02 23:14:45
Version Info:
0: [No Data]

Generic.GC.Downloader.4935590C also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.GC.Downloader.4935590C
McAfee	RDN/Generic Downloader.x
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00569c731 )
Alibaba	Trojan:Win32/Starter.ali2000005
K7GW	Trojan ( 00569c731 )
Cybereason	malicious.6ccbcf
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Phorpiex.X
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Downloader.Win32.Generic
BitDefender	Generic.GC.Downloader.4935590C
Avast	Win32:WormX-gen [Wrm]
Tencent	Win32.Trojan.Generic.Hupz
Ad-Aware	Generic.GC.Downloader.4935590C
Sophos	Mal/Generic-S
DrWeb	Trojan.Siggen15.60840
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
FireEye	Generic.mg.29e7b4b6ccbcfd7a
Emsisoft	Generic.GC.Downloader.4935590C (B)
Ikarus	Worm.Win32.Phorpiex
GData	Generic.GC.Downloader.4935590C
Jiangmin	TrojanDownloader.Generic.blqb
eGambit	Unsafe.AI_Score_98%
Avira	WORM/Phorpiex.fykgs
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Generic.GC.Downloader.D4B4FA6C
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Worm/Win.Generic.C4817712
BitDefenderTheta	AI:Packer.F979A6D41E
ALYac	Generic.GC.Downloader.4935590C
MAX	malware (ai score=88)
Malwarebytes	Malware.AI.743426854
TrendMicro-HouseCall	TROJ_GEN.R002H0CL521
Rising	Worm.Phorpiex!1.B6EF (CLASSIC)
Yandex	Worm.Phorpiex!cNcUVBCfwh8
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/NtRootKit.1786!tr
AVG	Win32:WormX-gen [Wrm]
CrowdStrike	win/malicious_confidence_80% (W)