Malware

Malware.AI.3510766059 removal

Malware Removal

The Malware.AI.3510766059 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3510766059 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with MPRESS
  • Authenticode signature is invalid

How to determine Malware.AI.3510766059?


File Info:

name: 41E2164CC0E0D70911B5.mlw
path: /opt/CAPEv2/storage/binaries/f71748190f8b220a7556e200cfe13594678086638dae045492513ce7847f8e63
crc32: 46751108
md5: 41e2164cc0e0d70911b550342b5e3eca
sha1: 352fd76172b62bec63ff2d631712ebaa90acfc21
sha256: f71748190f8b220a7556e200cfe13594678086638dae045492513ce7847f8e63
sha512: e956aa2db15dc622d3c2591723bf0bb70b26d1ed393f48a72dbcb361ebe198c301184422bad5dfc103ec963ab8dd7d3969e457e622034bbe5ad45e1e1731d246
ssdeep: 12288:719tSf0nnJAdQscdxOHizp4Y4n9Jsn2dYaaLqqme1WUgS:7bfndZzOUpeY2dYa+qaeS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T123F412899F21C882DED84A70449226F1EA3D7D667F2DDB735E58330C8B724B3894725A
sha3_384: 980ef21473dbb8ee0de92d170a1feaf7d47c19a05ff8c51d550b6efec23978e7020e35269f2399eac3c195e2058d9dfc
ep_bytes: 60e80000000058059f0200008b3003f0
timestamp: 2021-11-12 13:04:32

Version Info:

Comments:
CompanyName: Tomabo
FileDescription: MP4 Player
FileVersion: 4, 7, 0, 0
InternalName: MP4 Player
LegalCopyright: (C) Tomabo. All rights reserved.
LegalTrademarks:
OriginalFilename: MP4Player.EXE
PrivateBuild:
ProductName: MP4 Player
ProductVersion: 4, 7, 0, 0
SpecialBuild:
Translation: 0x0409 0x04b0

Malware.AI.3510766059 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Vtflooder.lnTD
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Midie.103548
FireEyeGeneric.mg.41e2164cc0e0d709
McAfeeArtemis!41E2164CC0E0
CrowdStrikewin/malicious_confidence_60% (W)
BitDefenderThetaGen:NN.ZexaF.34084.Vm0@aml6agii
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R06CH09KO21
Paloaltogeneric.ml
BitDefenderGen:Variant.Midie.103548
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Midie.103548
EmsisoftGen:Variant.Midie.103548 (B)
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.bc
GDataGen:Variant.Midie.103548
MAXmalware (ai score=89)
ArcabitTrojan.Midie.D1947C
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.R449177
VBA32BScope.Trojan.Wacatac
ALYacGen:Variant.Midie.103548
MalwarebytesMalware.AI.3510766059
APEXMalicious
RisingMalware.Heuristic!ET#81% (RDMK:cmRtazowL89LFAOSKcGLFpQPIza5)
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_99%
FortinetPossibleThreat.PALLASNET.H
AVGWin32:Malware-gen

How to remove Malware.AI.3510766059?

Malware.AI.3510766059 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment