Malware.AI.4145788791 (file analysis)

The Malware.AI.4145788791 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4145788791 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.4145788791?


File Info:
name: 389F5F5DA8F93B3B5C0B.mlw
path: /opt/CAPEv2/storage/binaries/d9b2f756da70c76342f645d2c6bf402c5c0689794dd00f92eb4a04b91c1ffc22
crc32: 04D09F15
md5: 389f5f5da8f93b3b5c0b6ed14ed94282
sha1: 5bc77991315a97f159c914537223530ecf869166
sha256: d9b2f756da70c76342f645d2c6bf402c5c0689794dd00f92eb4a04b91c1ffc22
sha512: c79c19cf7d89c09fc01ae60b2ce21604b24670302d37b504d6f4a681f99cc3a19fcea745d2e44b00ed3c362e4d4492e250120cfd5fa3dc8b4ee93f95e6f3aa7e
ssdeep: 1536:9Hby8E8ehwyfnPUBm+NR+xPKEBolfpLjCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCo:9Hby8EvwyPhxPbolf1pc/Zkxl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A324BBDE12F1115BD12846F4A959AFE016A1ECB87B52C715BD80FCCEBE323E054626E3
sha3_384: 75951a554849dfd1705d3e407a78c02ae6d55b82606572619577b990651353fc296cb0497d6273a3e3716e23f7b713d1
ep_bytes: ff250020400001000000020000000300
timestamp: 2058-01-08 11:50:43

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Dark Dashboard
FileVersion: 1.0.0.0
InternalName: Dark Dashboard.exe
LegalCopyright: Copyright ©  2019
LegalTrademarks: 
OriginalFilename: Dark Dashboard.exe
ProductName: Dark Dashboard
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.4145788791 also known as:

MicroWorld-eScan	IL:Trojan.MSILZilla.5749
FireEye	IL:Trojan.MSILZilla.5749
McAfee	RDN/Generic Downloader.x
Cylance	Unsafe
Zillya	Downloader.Agent.Win32.461175
Sangfor	Backdoor.MSIL.Crysan.gen
K7AntiVirus	Trojan-Downloader ( 00589c921 )
Alibaba	Backdoor:MSIL/Crysan.b2698449
K7GW	Trojan-Downloader ( 00589c921 )
CrowdStrike	win/malicious_confidence_60% (W)
Symantec	MSIL.Downloader!gen7
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.JGP
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
BitDefender	IL:Trojan.MSILZilla.5749
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
Avast	Win32:DropperX-gen [Drp]
Tencent	Msil.Trojan-downloader.Agent.Llhv
Ad-Aware	IL:Trojan.MSILZilla.5749
Emsisoft	IL:Trojan.MSILZilla.5749 (B)
TrendMicro	TROJ_GEN.R002C0PB922
McAfee-GW-Edition	RDN/Generic Downloader.x
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.MSIL.Agent
GData	IL:Trojan.MSILZilla.5749
Avira	TR/Dldr.Agent.hwwgu
Antiy-AVL	Trojan[Backdoor]/MSIL.Crysan
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.MSILZilla.C4956586
BitDefenderTheta	Gen:NN.ZemsilF.34212.nm0@auWpojj
ALYac	IL:Trojan.MSILZilla.5749
MAX	malware (ai score=84)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.4145788791
TrendMicro-HouseCall	TROJ_GEN.R002C0PB922
SentinelOne	Static AI – Suspicious PE
Fortinet	MSIL/Agent.IVE!tr.dldr
AVG	Win32:DropperX-gen [Drp]
Panda	Trj/GdSda.A

How to remove Malware.AI.4145788791?

Malware.AI.4145788791 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X