Malware

Malware.AI.104655316 malicious file

Malware Removal

The Malware.AI.104655316 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.104655316 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with MPRESS
  • Authenticode signature is invalid

How to determine Malware.AI.104655316?


File Info:

name: 39E6040B6D0F16F9828C.mlw
path: /opt/CAPEv2/storage/binaries/0780cc3c233f102c29a75468719de15c13163e31179d4aef4e02037bb6f03989
crc32: 55937FDC
md5: 39e6040b6d0f16f9828c942655d7b156
sha1: de0100e550a66a9faf0cd67dcc9b4d7eee73be30
sha256: 0780cc3c233f102c29a75468719de15c13163e31179d4aef4e02037bb6f03989
sha512: f5db59d0b9ef17977c22a3ab298cbc5f9b58f6f55b7d08d92fb3830903d4e02fd217de114b5449dc76099b12b8b87fc06c0b1eb4c2f49c11e3e765c2c78d0c77
ssdeep: 6144:xNGRCOGhuLNcjsiiS6E1F1aB4OaZYYa11ifNnkBdeiLu0GXrU6/d7jyvNJVQUi:2eup0if6Ha2OaeLWmBderJ9WPE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F8B4E08222CDF85DC275D2FC0882EFF8753A6E90E85A461265F03E2BB975F62BD151D0
sha3_384: db59b0ffcf93e7a951afc1c14be35ed4f7d1005ed8ccf343ceabd31e3a7c7f73f0599e617d1b70d030fd9d231a170126
ep_bytes: 60e80000000058055a0b00008b3003f0
timestamp: 2018-09-22 14:46:39

Version Info:

FileDescription:
FileVersion: 1.1.30.00
InternalName:
LegalCopyright:
OriginalFilename:
ProductName:
ProductVersion: 1.1.30.00
Translation: 0x0409 0x04b0

Malware.AI.104655316 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.4!c
CAT-QuickHealTrojan.GenericPMF.S19926024
CylanceUnsafe
K7AntiVirusRiskware ( 0040eff71 )
AlibabaTrojanDropper:Win32/AutoG.812a87bc
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.550a66
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002H06LC21
ClamAVWin.Dropper.Autog-9856630-0
SophosTroj/AutoG-JV
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
SentinelOneStatic AI – Malicious PE
FireEyeGeneric.mg.39e6040b6d0f16f9
MaxSecureTrojan.Malware.300983.susgen
Antiy-AVLTrojan/Generic.ASMalwS.2A75340
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GridinsoftRansom.Win32.Sabsik.sa
CynetMalicious (score: 100)
McAfeeGenericRXLN-LJ!39E6040B6D0F
VBA32BScope.Trojan.Tiggre
MalwarebytesMalware.AI.104655316
APEXMalicious

How to remove Malware.AI.104655316?

Malware.AI.104655316 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment