Malware

Malware.AI.12180796 removal

Malware Removal

The Malware.AI.12180796 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.12180796 virus can do?

  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Malware.AI.12180796?


File Info:

name: A5F5554456E7EC9B0E88.mlw
path: /opt/CAPEv2/storage/binaries/fb4a36698aafe7e59be3de7469806f2851393888cb3bc9943f090d3c47c4ba85
crc32: 36C7635B
md5: a5f5554456e7ec9b0e88772bacb6bd90
sha1: a2424deeac5e7102cb29ba401ca7def8338e8f6b
sha256: fb4a36698aafe7e59be3de7469806f2851393888cb3bc9943f090d3c47c4ba85
sha512: 8d0f8fb31f2687142aa2121eda4718879e6dcae89b26c8dbd34d84c8c967e2b790f303d9d429d091f844cb9b1a8a9bfe0683dfb2db0a371a5aea11a3a3b2265c
ssdeep: 1536:TXszsD4iEoT04Tj5OkRcxjeSWroVfgOjcpjc8+mbbdd6tnnjYdNvykkkkkkkkCkI:7LFEoAcjWj6jpD+YdNL1/YYdNp1/jHL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E5742E163948628EF832F37088FF9A6713967EBB253185473BF879692571F836C412C9
sha3_384: ccbcae4a4479b9f74fea3216c7eac956c3767feb7ba8f4a03942a46f3f7761d49892568afa9df048326c1bc94fc05b03
ep_bytes: ff250020400000000000000000000000
timestamp: 2092-06-12 05:33:08

Version Info:

Translation: 0x0000 0x04b0
Comments: Universal 16 in 1 Activator for FreeGrabApp
CompanyName: DeFconX
FileDescription: FreeGrabApp_Activator_By_DFoX
FileVersion: 1.7.0.0
InternalName: FreeGrabApp_Activator_By_DFoX.exe
LegalCopyright: Copyright © 2021
LegalTrademarks: DeltaFoX
OriginalFilename: FreeGrabApp_Activator_By_DFoX.exe
ProductName: FreeGrabApp_Activator_By_DFoX
ProductVersion: 1.7.0.0
Assembly Version: 1.7.0.0

Malware.AI.12180796 also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Generic.4!c
tehtrisGeneric.Malware
FireEyeGeneric.mg.a5f5554456e7ec9b
SkyhighRDN/Generic PUP.z
McAfeeRDN/Generic PUP.z
MalwarebytesMalware.AI.12180796
SangforTrojan.Win32.Agent.V5cl
AlibabaBackdoor:Application/Generic.69bed614
CrowdStrikewin/grayware_confidence_60% (D)
BitDefenderThetaGen:NN.ZemsilF.36744.um0@aOW!!xk
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
APEXMalicious
SentinelOneStatic AI – Suspicious PE
VaristW32/MSIL_Kryptik.JQB.gen!Eldorado
Antiy-AVLTrojan/Win32.Zpevdo
GoogleDetected
AhnLab-V3Trojan/Win.Hacktool.R268820
TrendMicro-HouseCallTROJ_GEN.R002H06AF24
RisingMalware.Obfus/MSIL@AI.85 (RDM.MSIL2:WTymSGJLMbI7PTGX0Wk75w)
Ikarusnot-a-virus:Keygen
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat
DeepInstinctMALICIOUS

How to remove Malware.AI.12180796?

Malware.AI.12180796 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment