IL:Trojan.MSILMamut.3688 malicious file

The IL:Trojan.MSILMamut.3688 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILMamut.3688 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine IL:Trojan.MSILMamut.3688?


File Info:
name: 9E5DEB2D9E0F70082E29.mlw
path: /opt/CAPEv2/storage/binaries/c6dee7fada26dbd8e9080050fd6c4b1b7d418eda54cc1ad8e3b6e5f0915af84b
crc32: CF4E71B9
md5: 9e5deb2d9e0f70082e292ea7ab7e7576
sha1: 28ae4a8a5a786effb24e7c3800ddd0bbb1b8d5fa
sha256: c6dee7fada26dbd8e9080050fd6c4b1b7d418eda54cc1ad8e3b6e5f0915af84b
sha512: a2096918e975b51e21531459dd35cfb10051395c7551cd05961f60a4d032aa0b911f33cd27f98688a02c347b520a627fd9bfd18b1599879033d31d50afff04a0
ssdeep: 3072:Ds9Bkrftk4kaDG7heGT4CVh+NBULOLLznwVsAxcxQZtvZFScjIudz9:DJjipYN6yLfnwmocxQZtCc9p
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1ED04803D350C5EB3C67C83B6649D197D12B0C0239681FA6F2DB83C991A522D7E3FA196
sha3_384: 5c056b72a1e0b2ebc42e81a6ed9087fce42bb343c222efbf33de466a8b22f176b2b16795d08ba17f93ae27a323799344
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-05-07 22:27:07

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: ExcelAccountingTool.exe
LegalCopyright:  
OriginalFilename: ExcelAccountingTool.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

IL:Trojan.MSILMamut.3688 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (moderate confidence)
MicroWorld-eScan	IL:Trojan.MSILMamut.3688
FireEye	IL:Trojan.MSILMamut.3688
McAfee	Artemis!9E5DEB2D9E0F
Cylance	Unsafe
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	IL:Trojan.MSILMamut.3688
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	IL:Trojan.MSILMamut.3688
Emsisoft	IL:Trojan.MSILMamut.3688 (B)
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.moderate.ml.score
GData	IL:Trojan.MSILMamut.3688
MAX	malware (ai score=83)
Arcabit	IL:Trojan.MSILMamut.DE68
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
ALYac	IL:Trojan.MSILMamut.3688
APEX	Malicious
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.a5a786

How to remove IL:Trojan.MSILMamut.3688?

IL:Trojan.MSILMamut.3688 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X