Generic.MSIL.PasswordStealerA.A6AD2847 (file analysis)

The Generic.MSIL.PasswordStealerA.A6AD2847 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.MSIL.PasswordStealerA.A6AD2847 virus can do?

Network activity detected but not expressed in API logs

How to determine Generic.MSIL.PasswordStealerA.A6AD2847?


File Info:
crc32: F7F2E8A4
md5: 4ea2f8d7bce3cde3690fea54e530012b
name: 4EA2F8D7BCE3CDE3690FEA54E530012B.mlw
sha1: 77e2d7dd7ce45f3959c1d009807ef6eb43a00f6b
sha256: 1294a91cd45ed0dc87531245654e961b6aa1b399ca32a33048a04ab7993b16b7
sha512: f233cf0ec0b22ff48170b4bf455637295bfdcb3953accded56b8640e68deb5749bcb1c6243d633531a23796bdc58fa526ee2f8ad8133e1e51ec6d3bb78de2588
ssdeep: 12288:TqnOn59Q81+YA9kaikzrDzpbF312J7u1dOf:T+On59aYAtikbx2J7A
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 1998-2021, Inc.
InternalName: Ganetgau
FileVersion: 16.1.02 17198959
CompanyName: 
ProductName: 
ProductVersion: 16.1.02 17198959
FileDescription: 
OriginalFilename: Ganetgau.exe
Translation: 0x0409 0x04b0

Generic.MSIL.PasswordStealerA.A6AD2847 also known as:

Elastic	malicious (high confidence)
DrWeb	BackDoor.QuasarNET.3
Cynet	Malicious (score: 100)
ALYac	DeepScan:Generic.MSIL.PasswordStealerA.A6AD2847
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Cybereason	malicious.7bce3c
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Spy.Agent.BYF
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
ClamAV	Win.Packed.Uztuby-9853721-0
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	DeepScan:Generic.MSIL.PasswordStealerA.A6AD2847
MicroWorld-eScan	DeepScan:Generic.MSIL.PasswordStealerA.A6AD2847
Ad-Aware	DeepScan:Generic.MSIL.PasswordStealerA.A6AD2847
BitDefenderTheta	Gen:NN.ZemsilF.34790.Fm0@amH9u@ii
McAfee-GW-Edition	Trojan-FTOO!4EA2F8D7BCE3
FireEye	Generic.mg.4ea2f8d7bce3cde3
Emsisoft	DeepScan:Generic.MSIL.PasswordStealerA.A6AD2847 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.MSIL.bmit
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Spy.BYF!MTB
GData	DeepScan:Generic.MSIL.PasswordStealerA.A6AD2847
AhnLab-V3	Trojan/Win.Spy.C4532195
McAfee	Trojan-FTOO!4EA2F8D7BCE3
MAX	malware (ai score=81)
Malwarebytes	Trojan.Crypt.MSIL
Rising	Spyware.KeyLogger!1.647D (CLASSIC)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	MSIL/Agent.BYF!tr.spy
AVG	Win32:TrojanX-gen [Trj]
Qihoo-360	Win32/TrojanSpy.Generic.HgIASXoA

How to remove Generic.MSIL.PasswordStealerA.A6AD2847?

Generic.MSIL.PasswordStealerA.A6AD2847 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X