Malware

Should I remove “Malware.AI.2046858418”?

Malware Removal

The Malware.AI.2046858418 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2046858418 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs
  • Binary compilation timestomping detected

Related domains:

wpad.local-net

How to determine Malware.AI.2046858418?


File Info:

name: 6E95F9B3607864DF4E50.mlw
path: /opt/CAPEv2/storage/binaries/517c8c98a80c67ee67519295ad324bff331efce01c866270aa6a7683c79859ff
crc32: D325A083
md5: 6e95f9b3607864df4e5037fbfd1e9ef1
sha1: 54cb561bdc30e44f98252b80e2b5ae46a4ca227d
sha256: 517c8c98a80c67ee67519295ad324bff331efce01c866270aa6a7683c79859ff
sha512: abfad121b11d70d02d64661dd8166b4216abbada7171bd7ef49909fa90bde5d43703aca7caff61dc6a394f8ac39ce872a0960098b17d1fd71f2a9605ba9813dc
ssdeep: 3072:k3TjlbjeSS3rvY05ahPWce7HLXxgzHY0ru/CyQwfe5ghjcgl0eVSdxobfOI7WYEr:k3TUSSNahP0LiE0ruaUemxcgvCxKi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18624CE4933D69B2AD07D8BB8056060A007F5EE22F216DF9EBFD270AD0D76F908A51747
sha3_384: dbb040175c5b311f8d91f78bcc4c44792d11a4b4544e4f1a3358cb80e8e5468d1c3fd8014296fe2ec667f01add19f84c
ep_bytes: ff250020400000000000000000000000
timestamp: 2059-09-17 07:57:39

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: WindowsApp2
FileVersion: 1.0.0.0
InternalName: DarkCrowRuChecker.exe
LegalCopyright: Copyright © 2018
LegalTrademarks:
OriginalFilename: DarkCrowRuChecker.exe
ProductName: WindowsApp2
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.2046858418 also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanGen:Variant.MSILPerseus.194227
ALYacGen:Variant.MSILPerseus.194227
CylanceUnsafe
SangforSuspicious.Win32.MSILPerseus.194227
K7AntiVirusHacktool ( 0054432c1 )
AlibabaTrojan:MSIL/Generic.dae2a179
K7GWHacktool ( 0054432c1 )
Cybereasonmalicious.360786
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/HackTool.BruteForce.II
APEXMalicious
BitDefenderGen:Variant.MSILPerseus.194227
AvastWin32:Trojan-gen
TencentMsil.Trojan.Msilperseus.Wskj
Ad-AwareGen:Variant.MSILPerseus.194227
ComodoMalware@#14jbkf6leptec
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PKQ21
McAfee-GW-EditionGenericRXHH-LZ!6E95F9B36078
FireEyeGen:Variant.MSILPerseus.194227
EmsisoftGen:Variant.MSILPerseus.194227 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.MSILPerseus.194227
GridinsoftRansom.Win32.Wacatac.sa
ArcabitTrojan.MSILPerseus.D2F6B3
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeGenericRXHH-LZ!6E95F9B36078
MAXmalware (ai score=83)
MalwarebytesMalware.AI.2046858418
TrendMicro-HouseCallTROJ_GEN.R002C0PKQ21
FortinetMSIL/BruteForce.IN!tr
BitDefenderThetaGen:NN.ZemsilF.34294.nm0@aKhh@@l
AVGWin32:Trojan-gen
PandaTrj/GdSda.A
MaxSecureTrojan.Malware.300983.susgen

How to remove Malware.AI.2046858418?

Malware.AI.2046858418 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment