Categories: Malware

MSIL/Agent_AGen.GC malicious file

The MSIL/Agent_AGen.GC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Agent_AGen.GC virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine MSIL/Agent_AGen.GC?


File Info:
name: 3BEDDF5A595F8F0638A0.mlwpath: /opt/CAPEv2/storage/binaries/b4c4a2a82c2fd9b332771e1021ed6d648cdc62de511246c929002c2e7d761b25crc32: E756A3BDmd5: 3beddf5a595f8f0638a027ae0bef879asha1: cd44de0fcb346712c71214dfb214637b8ec40091sha256: b4c4a2a82c2fd9b332771e1021ed6d648cdc62de511246c929002c2e7d761b25sha512: 3a6bb7605fa37b43d589804ea4c75e0c4785d021188c185faaa769d54033b7221d4023e72e3618ef2a48d13a6ab782a1d4dd6c43de9ff09e89a2051805589c91ssdeep: 12288:O1M+p96Lk0RiPD3BT+RA6Jh8o6U7/RMShX:OFp9B0U6A6JWo6U7/RMSNtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T109B4285BB3168955F609EBB0DE735F600B60FDB7CD11A207E348BA68D03F768268474Asha3_384: 4a9a743723543ac61bbf8de56bae3a8af7fa6edaa7ac1d5201436eeb138051331e5c81281016693f4064e2669f57313eep_bytes: ff250020400000000000000000000000timestamp: 2021-11-25 16:46:10
Version Info:
Translation: 0x0000 0x04b0Comments: Windows Memory Diagnostics ToolCompanyName: Microsoft CorporationFileDescription: Windows Memory Diagnostics ToolFileVersion: 10.0.14393.0InternalName: Install Services.exeLegalCopyright: © Microsoft Corporation. All rights reserved.LegalTrademarks: OriginalFilename: Install Services.exeProductName: Microsoft® Windows® Operating SystemProductVersion: 10.0.14393.0Assembly Version: 10.0.14393.0

MSIL/Agent_AGen.GC also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen15.57256
MicroWorld-eScan	Trojan.GenericKD.47512117
FireEye	Generic.mg.3beddf5a595f8f06
CAT-QuickHeal	TrojanDownloader.MSIL
McAfee	Artemis!3BEDDF5A595F
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0058b2761 )
Alibaba	TrojanDownloader:MSIL/Tnega.411914a6
K7GW	Trojan ( 0058b2761 )
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34114.Fm0@a4pozvd
Cyren	W32/MSIL_Kryptik.FSG.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent_AGen.GC
TrendMicro-HouseCall	TROJ_GEN.R032C0DL221
Paloalto	generic.ml
ClamAV	Win.Dropper.Generic-7113183-0
Kaspersky	HEUR:Trojan-Downloader.MSIL.Seraph.gen
BitDefender	Trojan.GenericKD.47512117
NANO-Antivirus	Trojan.Win32.Seraph.jjblll
Avast	Win32:DropperX-gen [Drp]
Ad-Aware	Trojan.GenericKD.47512117
Emsisoft	Trojan.GenericKD.47512117 (B)
Zillya	Trojan.AgentAGen.Win32.701
TrendMicro	TROJ_GEN.R032C0DL221
McAfee-GW-Edition	Artemis!Trojan
SentinelOne	Static AI – Malicious PE
Sophos	Mal/Generic-S
Ikarus	Trojan.Dropper
GData	Trojan.GenericKD.47512117
Jiangmin	TrojanDownloader.MSIL.agcl
MaxSecure	Trojan.Malware.74570710.susgen
Avira	TR/Dropper.Gen2
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:MSIL/Tnega.KA!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win.Generic.C4795145
VBA32	TScope.Trojan.MSIL
APEX	Malicious
MAX	malware (ai score=82)
eGambit	Trojan.Generic
Fortinet	MSIL/Kryptik.ADOA!tr
Webroot	W32.Dropper.Gen
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.fcb346
Panda	Trj/GdSda.A