Malware

Malware.AI.1255598194 information

Malware Removal

The Malware.AI.1255598194 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1255598194 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Behavioural detection: Executable code extraction – unpacking
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.1255598194?


File Info:

name: 84D35DC58453C2AC138F.mlw
path: /opt/CAPEv2/storage/binaries/20cea3accc5924adf5fddf17dd58124adbac555c303c64ade636ca9d00e4a2a0
crc32: 644F5CDF
md5: 84d35dc58453c2ac138fd79c8ef4b2fe
sha1: a1bde6b93d76ecb0183bec1cf1eb671c5bfc4561
sha256: 20cea3accc5924adf5fddf17dd58124adbac555c303c64ade636ca9d00e4a2a0
sha512: f62307a05871becafb246b82b92110555978d164666ffb371d9a701ca35f43a8b842415869f43282975d01d9ecda7555151384b37d00589cc40f9894a15f4ed1
ssdeep: 24576:6T3E53Myyzl0hMf1tr7Caw8M07sAuDzxWyhbF2dZXIBzwKdYVjp171F3tm7s7:Y3EZpBh211Waw30WDzxzhbuRKwpBZSS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D8D527217BEFA312DD7661708F3D92A185703C9417E2C6AB22943A6DDD3319C692F723
sha3_384: de5093b12fa8880c7a12ff5de44bbe01a10248d1714021bc5c7c5bfee505d7202f777dbb8697f6e2d9813c88f2cdb7d2
ep_bytes: e8b8d00000e97ffeffffcccccccccccc
timestamp: 2018-03-15 13:14:39

Version Info:

CompanyName: AutoIt Team
Comments: http://www.autoitscript.com/autoit3/
FileDescription: AutoIt v3 Script
FileVersion: 3, 3, 14, 5
InternalName: AutoIt3.exe
LegalCopyright: ©1999-2018 Jonathan Bennett & AutoIt Team
OriginalFilename: AutoIt3.exe
ProductName: AutoIt v3 Script
ProductVersion: 3, 3, 14, 5
Translation: 0x0809 0x04b0

Malware.AI.1255598194 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
McAfeeArtemis!84D35DC58453
MalwarebytesMalware.AI.1255598194
CyrenW32/Agent.CQY.gen!Eldorado
APEXMalicious
ClamAVWin.Trojan.Blackie-9838328-0
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Malicious PE
AviraDR/AutoIt.Gen
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
TrendMicro-HouseCallTROJ_GEN.R03BH0CB222
IkarusVirus.Win32.Fakefire
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Ursu.3523!tr
AVGWin32:Malware-gen
AvastWin32:Malware-gen
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Malware.AI.1255598194?

Malware.AI.1255598194 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment