Categories: Malware

Generic.MSIL.PasswordStealerA.ED6FD18A removal

The Generic.MSIL.PasswordStealerA.ED6FD18A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.MSIL.PasswordStealerA.ED6FD18A virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the QuasarRAT malware family
Binary file triggered YARA rule

How to determine Generic.MSIL.PasswordStealerA.ED6FD18A?


File Info:
name: B635EEA7BD8D5E9784C7.mlwpath: /opt/CAPEv2/storage/binaries/7fe27b8dcf342699ab376510a0062dafb68c830689696d797f1e0b3d0f9661d9crc32: FA7F3F1Cmd5: b635eea7bd8d5e9784c71c348a9feb0dsha1: 0a7523c40e002bbbc5efd4c6bb1089e48f4d14a6sha256: 7fe27b8dcf342699ab376510a0062dafb68c830689696d797f1e0b3d0f9661d9sha512: efc8deda912a41f79dcbe147697dcd187fd8bf75bbd701b208ab8db51ac4315d1e0bf1b595734beb7882321a3875f90fbc33a643207f63845432c479e8cc904essdeep: 6144:mTNHXf500MUUJ1qjia80biCIBRe6V293/dGDwVtA3G+:gd50DJ1qjyFRerllswz8G+type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A5747D1377E4ED3BD1BE277AF432061447B4D50BB616E38B5A6855F82C223868E413B7sha3_384: 64b4d346279cee6b5b568c903b2a80cb1e4a209da4100c47db67133efc5f88bbf70b008edbf4853c129ec0ba117fe3f4ep_bytes: ff250020400000000000000000000000timestamp: 2024-03-03 08:05:17
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: FileVersion: 1.3.0.0InternalName: Client.exeLegalCopyright: LegalTrademarks: OriginalFilename: Client.exeProductName: ProductVersion: 1.3.0.0Assembly Version: 1.3.0.0

Generic.MSIL.PasswordStealerA.ED6FD18A also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	Windows.Trojan.Quasarrat
DrWeb	Trojan.DownLoader27.59888
MicroWorld-eScan	Generic.MSIL.PasswordStealerA.ED6FD18A
FireEye	Generic.mg.b635eea7bd8d5e97
Skyhigh	BehavesLike.Win32.Generic.fh
ALYac	Generic.MSIL.PasswordStealerA.ED6FD18A
Cylance	unsafe
Zillya	Trojan.Agent.Win32.1114670
Sangfor	Suspicious.Win32.Save.a
Alibaba	Backdoor:MSIL/Quasar.18e513f5
K7GW	Trojan ( 00521dab1 )
K7AntiVirus	Trojan ( 00521dab1 )
Arcabit	Generic.MSIL.PasswordStealerA.ED6FD18A
BitDefenderTheta	Gen:NN.ZemsilF.36802.vm0@aG6F4Ec
VirIT	Trojan.Win32.MSIL_Heur.B
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
APEX	Malicious
Avast	MSIL:Rat-B [Trj]
ClamAV	Win.Packed.Generic-9829635-0
Kaspersky	Trojan.MSIL.Agent.foww
BitDefender	Generic.MSIL.PasswordStealerA.ED6FD18A
ViRobot	Trojan.Win.Z.Agent.356352.YP
Tencent	Trojan.Msil.Agent.zc
Emsisoft	Generic.MSIL.PasswordStealerA.ED6FD18A (B)
F-Secure	Trojan:w32/QuasarRAT.A1
VIPRE	Generic.MSIL.PasswordStealerA.ED6FD18A
TrendMicro	TSPY_TINCLEX.SM1
Trapmine	suspicious.low.ml.score
Sophos	ATK/Zaquar-D
MAX	malware (ai score=89)
Jiangmin	Trojan.Generic.ajfvk
Webroot	W32.Malware.Gen
Google	Detected
Avira	HEUR/AGEN.1307329
Varist	W32/MSIL_Mintluks.A.gen!Eldorado
Antiy-AVL	Trojan/MSIL.Agent
Kingsoft	malware.kb.c.1000
Microsoft	Backdoor:MSIL/Quasar.GG!MTB
SUPERAntiSpyware	Trojan.Agent/Gen-PasswordStealer
ZoneAlarm	Trojan.MSIL.Agent.foww
GData	MSIL.Backdoor.Quasar.D
AhnLab-V3	Trojan/Win32.Subti.R285137
McAfee	PWS-FCOI!B635EEA7BD8D
VBA32	Trojan.MSIL.Quasar.Heur
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
TrendMicro-HouseCall	TSPY_TINCLEX.SM1
Rising	Backdoor.xRAT!1.D01D (CLASSIC)
Yandex	Trojan.Agent!RDLMJ3XlqTc
Ikarus	Backdoor.QuasarRat
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Emotet.5C62!tr
AVG	MSIL:Rat-B [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Backdoor:MSIL/Quasar.server