Categories: Ransom

What is “Generic.MSIL.Ransomware.Jigsaw.1CE0FC54”?

The Generic.MSIL.Ransomware.Jigsaw.1CE0FC54 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.MSIL.Ransomware.Jigsaw.1CE0FC54 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Creates a copy of itself

How to determine Generic.MSIL.Ransomware.Jigsaw.1CE0FC54?


File Info:
crc32: FF262472md5: 50e4cbca355a76b9401a79037a17723ename: 50E4CBCA355A76B9401A79037A17723E.mlwsha1: 789cac4f659c5a6265802d4a87ee70e70bda60e4sha256: af5faba437e43802b5d410fceb3a4463c0946648406dc6de7ff0b7dd6e1c7d7esha512: 9dcc135cef00a5cd9784c55fe5e08c2af9ab065932b2fe2b2562683c65d43811242878ac75ba6fa25cbc3e74f2ff3c41270d2158a21a962bb71abfd79baf5d9fssdeep: 12288:cEZ1zHqwe8kXO3WdBrkFpbKpmGUdZGi0jMdhhSKKVdib+zJfAOc91MgG83:pzKH8kXOmsp8qdZZ0j00u6N1R2type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
LegalCopyright: Copyright(C) 2013 by FtpScripterInternalName: FtpScripter EditorFileVersion: 2.0.5.25CompanyName: ScripterLegalTrademarks: FtpScripterProductName: FtpScripterProductVersion: 2.0FileDescription: FtpScripter EditorOriginalFilename: FtpScripterEditor.exeTranslation: 0x0409 0x04e4

Generic.MSIL.Ransomware.Jigsaw.1CE0FC54 also known as:

K7AntiVirus	Trojan ( 0053fc801 )
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop7.52278
Cynet	Malicious (score: 100)
ALYac	Generic.MSIL.Ransomware.Jigsaw.1CE0FC54
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanBanker:MSIL/Confuser.1e779ea7
K7GW	Trojan ( 0053fc801 )
Cybereason	malicious.a355a7
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-Banker.MSIL.BitStealer.gen
BitDefender	Generic.MSIL.Ransomware.Jigsaw.1CE0FC54
NANO-Antivirus	Trojan.Win32.Confuser.euuwkg
MicroWorld-eScan	Generic.MSIL.Ransomware.Jigsaw.1CE0FC54
Tencent	Win32.Trojan.Generic.Swbc
Ad-Aware	Generic.MSIL.Ransomware.Jigsaw.1CE0FC54
Sophos	Troj/Jigsaw-L
BitDefenderTheta	Gen:NN.ZemsilF.34758.Pm0@aeBcTpai
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
FireEye	Generic.mg.50e4cbca355a76b9
Emsisoft	Generic.MSIL.Ransomware.Jigsaw.1CE0FC54 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.bodyj
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1109336
Antiy-AVL	Trojan/Generic.ASMalwS.228A1D7
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:MSIL/Confuser.UI
GData	Generic.MSIL.Ransomware.Jigsaw.1CE0FC54
AhnLab-V3	Trojan/Win32.Ransomlock.R217840
McAfee	Artemis!50E4CBCA355A
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.849276241
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!JF3ZAweDYE8
Ikarus	Trojan.MSIL.NanoCore
Fortinet	MSIL/CoinStealer.AA!tr.pws
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml