Malware

Generic.MSIL.PasswordStealerA.DD2EFDE1 (file analysis)

Malware Removal

The Generic.MSIL.PasswordStealerA.DD2EFDE1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generic.MSIL.PasswordStealerA.DD2EFDE1 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Generic.MSIL.PasswordStealerA.DD2EFDE1?



File Info:

crc32: EE06A7EC
md5: cc652115da78054b0d526925853bb6c4
name: CC652115DA78054B0D526925853BB6C4.mlw
sha1: 2cfde4489ad071b19c1eb9d7ab626abeef30cabc
sha256: d4f1a84eedf38127edc741771c3f1edbad8d4fb02fce8a79c4b90bc0a68ad849
sha512: 18b7d55eaff5028779583e940e55f10fec2fc51ac50edbe869450d642319f9d7d0007d01fd6f423fca31e83e61362ad741b3748e25453020142638ec720471b6
ssdeep: 3072:QCq8e7R98or2n1Uv+mRLw0qByYHJ/bLxwBZSQnbY:d91UWmRL7qAYHVbiS+b
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: iJMJnUDAnLMGBkvrphkwZ.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: iJMJnUDAnLMGBkvrphkwZ
ProductVersion: 1.0.0.0
FileDescription: iJMJnUDAnLMGBkvrphkwZ
OriginalFilename: iJMJnUDAnLMGBkvrphkwZ.exe

Generic.MSIL.PasswordStealerA.DD2EFDE1 also known as:

Elasticmalicious (high confidence)
DrWebBackDoor.RatNET.2
CynetMalicious (score: 100)
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ALYacDeepScan:Generic.MSIL.PasswordStealerA.DD2EFDE1
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
Cybereasonmalicious.5da780
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Spy.Agent.AES
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.MSIL.PasswordStealerA.DD2EFDE1
MicroWorld-eScanDeepScan:Generic.MSIL.PasswordStealerA.DD2EFDE1
Ad-AwareDeepScan:Generic.MSIL.PasswordStealerA.DD2EFDE1
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34050.hm0@a8!Dcpp
TrendMicroTROJ_GEN.R06EC0DGV21
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.cc652115da78054b
EmsisoftDeepScan:Generic.MSIL.PasswordStealerA.DD2EFDE1 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/ATRAPS.Gen
eGambitUnsafe.AI_Score_100%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftPWS:MSIL/Mintluks.A
ArcabitDeepScan:Generic.MSIL.PasswordStealerA.DD2EFDE1
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataMSIL.Trojan-Stealer.SnakeKeylogger.A
AhnLab-V3Trojan/Win.SnakeKeylogger.R433068
McAfeeRDN/Generic PWS.y
MAXmalware (ai score=88)
VBA32Malware-Cryptor.MSIL.AgentTesla.Heur
MalwarebytesMalware.AI.2228795492
TrendMicro-HouseCallTROJ_GEN.R06EC0DGV21
IkarusTrojan.MSIL.Spy
FortinetW32/Agent.AES!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/TrojanSpy.Generic.HwMAueAA

How to remove Generic.MSIL.PasswordStealerA.DD2EFDE1?

Generic.MSIL.PasswordStealerA.DD2EFDE1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment