About “Malware.AI.4215314852” infection

The Malware.AI.4215314852 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4215314852 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Malware.AI.4215314852?


File Info:
name: E6CDCA95A61C431E732C.mlw
path: /opt/CAPEv2/storage/binaries/9c5a2e91dabbcf211b29e83f956d8b477d5a9245529bbe96219ac26d201918f6
crc32: 7D1D760D
md5: e6cdca95a61c431e732c528cc8669f89
sha1: 92db70721cbadda4a876fd61f19280fd3464c602
sha256: 9c5a2e91dabbcf211b29e83f956d8b477d5a9245529bbe96219ac26d201918f6
sha512: 3918943cfbf6a00dba2140c1bd3157ba93d5d68b11f151da76626443333a1bd51dfe73615d242aecee08a3913eaafe8d9f32dc83cb5361b22062d846e14d0fef
ssdeep: 6144:FMlmSsKFAkpLK9JbYuU+vnZAbgE/arlLK9JbYuU:NcAmm/8JGZAbgE/a5m/8J
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T101A4F750720AAF4BCE2253B54462F33613F41ED9B311E5225DF1ACE7F951B809F68ACA
sha3_384: f9c421b8b4c4e50828ec623178f3c966cd554e0dd7e3ed7d1f5b074db70a261340d4ca77a498e8e1b87e9615e0722e91
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-05-18 10:07:51

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Pain Exist
FileVersion: 1.0.0.0
InternalName: Thunder Modz.exe
LegalCopyright: Copyright ©  2018
LegalTrademarks: 
OriginalFilename: Thunder Modz.exe
ProductName: Pain Exist
ProductVersion: 1.0.0.0
Assembly Version: 2.0.0.0

Malware.AI.4215314852 also known as:

MicroWorld-eScan	Gen:Variant.Ursu.229583
FireEye	Generic.mg.e6cdca95a61c431e
McAfee	GenericRXFM-KS!E6CDCA95A61C
Cylance	Unsafe
Sangfor	Trojan.Win32.AgentTesla.ml
Cybereason	malicious.5a61c4
BitDefenderTheta	Gen:NN.ZemsilF.34084.Dm0@aCqf1tk
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/DllInject.VR potentially unsafe
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Ursu.229583
NANO-Antivirus	Trojan.Win32.DllInject.fclwwd
Avast	MSIL:Agent-BAO [Trj]
Ad-Aware	Gen:Variant.Ursu.229583
Sophos	Generic PUA JC (PUA)
Comodo	Malware@#1lqkqfs4pceov
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXFM-KS!E6CDCA95A61C
Emsisoft	Gen:Variant.Ursu.229583 (B)
GData	Gen:Variant.Ursu.229583
Webroot	W32.Trojan.Gen
MAX	malware (ai score=97)
Microsoft	Trojan:Win32/Occamy.C9C
AhnLab-V3	Malware/Win32.RL_Generic.C4137436
ALYac	Gen:Variant.Ursu.229583
Malwarebytes	Malware.AI.4215314852
Yandex	Riskware.Agent!qDHiwynVhIA
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/DllInject.VR
AVG	MSIL:Agent-BAO [Trj]
Panda	Trj/GdSda.A

How to remove Malware.AI.4215314852?

Malware.AI.4215314852 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X