Trojan.GenericFCA.Agent.20120 (file analysis)

The Trojan.GenericFCA.Agent.20120 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.GenericFCA.Agent.20120 virus can do?

Network activity detected but not expressed in API logs

How to determine Trojan.GenericFCA.Agent.20120?


File Info:
crc32: 1ECD9FB0
md5: 4f993a8587d85eb0fef151e6bcaf3e00
name: 4F993A8587D85EB0FEF151E6BCAF3E00.mlw
sha1: 7a38302db47168c23b6533b24cc973d19fd0ca01
sha256: 29b5f130d45482fe5566c41540580843bc2d541e389da24b1526ba9e85abe17a
sha512: b52fac98fbe573b348f30c243584c3b628c9ebf00ec7e1c4a8c637c15c27f8a9ac9b99947d27e52dd2f7a971fa9e1b02d379c223ebe3c3296e53d2e8f97e074b
ssdeep: 6144:Xsc4ENP89VGHqfiJDWxTrFWpal+z3kE3x+7/KX8/T2h9+Rs+qQoCs0YxIeCjVsG:Xz0VGHqa0xRWA6p3UeWqpCmaeCGG0g
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2014
Assembly Version: 1.0.0.0
InternalName: H64C.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: War
ProductVersion: 1.0.0.0
FileDescription: War
OriginalFilename: H64C.exe

Trojan.GenericFCA.Agent.20120 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericFCA.Agent.20120
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/MSIL_Kryptik.COP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HMOL
APEX	Malicious
Avast	FileRepMalware
Kaspersky	UDS:Trojan-PSW.MSIL.Agensla
BitDefender	Trojan.GenericFCA.Agent.20120
Ad-Aware	Trojan.GenericFCA.Agent.20120
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.UMal.bgbzh@0
BitDefenderTheta	Gen:NN.ZemsilF.34170.Ym0@aW@d8tl
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.4f993a8587d85eb0
Emsisoft	Trojan.GenericFCA.Agent.20120 (B)
Microsoft	Trojan:MSIL/AgentTesla.CTS!MTB
GData	MSIL.Trojan.BSE.J6WY0C
McAfee	RDN/Generic.dx
MAX	malware (ai score=82)
Malwarebytes	Malware.AI.4243554696
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.F0D1C00IM21
SentinelOne	Static AI – Malicious PE
Fortinet	Malicious_Behavior.SB
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Trojan.GenericFCA.Agent.20120?

Trojan.GenericFCA.Agent.20120 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X