Malware

Malware.AI.1878731751 malicious file

Malware Removal

The Malware.AI.1878731751 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1878731751 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs
  • Binary compilation timestomping detected

Related domains:

wpad.local-net

How to determine Malware.AI.1878731751?


File Info:

name: 51A8796BBA5BF7B8B1A2.mlw
path: /opt/CAPEv2/storage/binaries/45e8eff1eb692e8ea900dfbd164753c07cbb2582e417b1d8653389687a0c285d
crc32: C8DF26B4
md5: 51a8796bba5bf7b8b1a236bb6412c808
sha1: b2d240e6f6d02bbc56f17288270f2cb9bae586c4
sha256: 45e8eff1eb692e8ea900dfbd164753c07cbb2582e417b1d8653389687a0c285d
sha512: 9c8aab53dd7d67c77cd3729758d623ce991b5a5e84d5a284adee447182741610757dcba5e254f85f7353334bbbd47deb6f217dc05327fc79b8342b92f96edc9a
ssdeep: 49152:zC9cbxUbq0AOlhi8p7okx9/QguB8pO2J3Y2ppxbb0k71+FIg4/vj8d5E+PpfLUZM:d3bufokx9YgFpO2Jo2N/03FIgcCfxW8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19DE52340B34ACD46E8BD2A7CBBEB90D0D63A6C91A4E1C38F2C94769F1E7370396115D6
sha3_384: 9c8e02c61198950277aba05d6c098e795dcd08e10584fbb2dfe6801131e193d74de2d6221c03108950a7c5fe92780767
ep_bytes: ff250020400000000000000000000000
timestamp: 2054-03-06 03:29:04

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: K1 Interface
FileVersion: 1.0.0.0
InternalName: K1 Interface.exe
LegalCopyright: Copyright © 2019
LegalTrademarks:
OriginalFilename: K1 Interface.exe
ProductName: K1 Interface
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.1878731751 also known as:

LionicTrojan.Win32.Perseus.4!c
MicroWorld-eScanTrojan.GenericKD.43858330
FireEyeGeneric.mg.51a8796bba5bf7b8
ALYacTrojan.GenericKD.43858330
MalwarebytesMalware.AI.1878731751
ZillyaTrojan.DllInject.Win32.3729
SangforTrojan.Win32.Occamy.C45
CrowdStrikewin/malicious_confidence_60% (W)
K7GWUnwanted-Program ( 00518ad91 )
K7AntiVirusUnwanted-Program ( 00518ad91 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/DllInject.WW potentially unsafe
Paloaltogeneric.ml
BitDefenderTrojan.GenericKD.43858330
AvastWin32:TrojanX-gen [Trj]
Ad-AwareTrojan.GenericKD.43858330
EmsisoftTrojan.GenericKD.43858330 (B)
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGenericRXKB-HH!51A8796BBA5B
SophosGeneric PUA LC (PUA)
SentinelOneStatic AI – Suspicious PE
GDataTrojan.GenericKD.43858330
WebrootW32.Trojan.Gen
MicrosoftTrojan:Win32/Occamy.C45
McAfeeGenericRXKB-HH!51A8796BBA5B
MAXmalware (ai score=80)
TrendMicro-HouseCallTROJ_GEN.R007H0CHM21
YandexRiskware.Agent!SIvsHffEyCg
IkarusPUA.DLLInjector
MaxSecureTrojan.Malware.74780147.susgen
BitDefenderThetaGen:NN.ZemsilF.34294.bp0@ayWRi!g
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.bba5bf
PandaTrj/GdSda.A

How to remove Malware.AI.1878731751?

Malware.AI.1878731751 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment