Malware

Should I remove “Malware.AI.4236224512”?

Malware Removal

The Malware.AI.4236224512 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4236224512 virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4236224512?


File Info:

name: EB085EA71EA8B2E476FE.mlw
path: /opt/CAPEv2/storage/binaries/6701a72cedf100b15b1f839f6e4f254e446d58da8ffe5e6a05e536ca144c29db
crc32: 6E21043D
md5: eb085ea71ea8b2e476fe3f92693a64dd
sha1: 29cddc1bf56612545181cedfa4c9067ba52ef947
sha256: 6701a72cedf100b15b1f839f6e4f254e446d58da8ffe5e6a05e536ca144c29db
sha512: 02976e85e1771583ef0f5f2df2c1a1d23b433a130df64943594deed48e6ae9b69f9c4e3f25f228aa46e33d26aa66fb513022a6bcc1f61f6be2f80cae941bd66f
ssdeep: 12288:YXnejbmpz+bGSIFkxAyAO6ejUnhB9w2TdkDF3zSWoSt:Oefmpzny96eiQG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T145B423E1F2CF2C65C274CAB112826F4A5F74D934B5A28FAC76B7189798447E6DF31022
sha3_384: 6d013abf223b8c16be9878b42a8871d24620118e5b458df6fc544ca0d644606b7093e2bb63a8675c46d6d1177bfb82fd
ep_bytes: 60be008052008dbe0090edff5789e58d
timestamp: 2022-08-08 23:06:17

Version Info:

0: [No Data]

Malware.AI.4236224512 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (moderate confidence)
MicroWorld-eScanTrojan.Generic.31804463
FireEyeGeneric.mg.eb085ea71ea8b2e4
CAT-QuickHealTrojan.SabsikRI.S24673328
McAfeeRDN/Real Protect-LS
MalwarebytesMalware.AI.4236224512
VIPRETrojan.Generic.31804463
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005246d51 )
K7GWTrojan ( 005246d51 )
CrowdStrikewin/grayware_confidence_70% (D)
CyrenW32/ABRisk.FCNI-5824
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
BitDefenderTrojan.Generic.31804463
NANO-AntivirusTrojan.Win32.FlyStudio.jsugpw
AvastWin32:TrojanX-gen [Trj]
EmsisoftTrojan.Generic.31804463 (B)
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
Trapminemalicious.high.ml.score
SophosGeneric Reputation PUA (PUA)
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.10248TU
MAXmalware (ai score=89)
Antiy-AVLTrojan/Win32.FlyStudio.a
ArcabitTrojan.Generic.D1E54C2F
MicrosoftProgram:Win32/Wacapew.C!ml
GoogleDetected
AhnLab-V3Trojan/Win.JP.C4740837
BitDefenderThetaGen:NN.ZexaF.36196.FmGfaOLUrLib
ALYacTrojan.Generic.31804463
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H0CED23
RisingMalware.Undefined!8.C (TFE:5:exqpTLJi5y)
IkarusTrojan.Win32
FortinetRiskware/Application
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.bf5661
DeepInstinctMALICIOUS

How to remove Malware.AI.4236224512?

Malware.AI.4236224512 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment