Malware.AI.1256455463 information

The Malware.AI.1256455463 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1256455463 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.1256455463?


File Info:
name: 77828DD981FC27DACE7D.mlw
path: /opt/CAPEv2/storage/binaries/d42c68510d762d8faaa6a561cc256ef16a37c7a2995dc33d5c4ea54b33616278
crc32: F530873A
md5: 77828dd981fc27dace7d03cfc5ea3889
sha1: e22969937ecf57c972220e5dd881fd58d6c54b67
sha256: d42c68510d762d8faaa6a561cc256ef16a37c7a2995dc33d5c4ea54b33616278
sha512: 093dda35428a8c0d28ea956b8ea4369b2bd3729458472ad471c21e78a6062b209cf3211cb33a9205df334d3079e8c09de9ea672c420f646e2bf00c8bc99d0748
ssdeep: 12288:jqiqKjNyi3d6iur4zuaMQJBBBDsEVt8n3dPiCGThbpudS:jqqHdarNaMQ3slPiCGTLudS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E2158DA17D47485DEB2A073904A2E152E1A86EF13E21A74D33B673B8CD327567F23187
sha3_384: 23e90d5d2a42f97035d48834472b5179af80eb440327eb341f58a750f50b887f74507e13372fbaea1627c54e0be3b3dd
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-01-21 12:01:16

Version Info:
Translation: 0x0000 0x04b0
Comments: Application
CompanyName: Baidu
FileDescription: Baidu Browser
FileVersion: 43.23.1007.94
InternalName: 334.exe
LegalCopyright: Copyright (c) Baidu Inc.
OriginalFilename: 334.exe
ProductName: Baidu Browser
ProductVersion: 43.23.1007.94
Assembly Version: 0.0.0.0

Malware.AI.1256455463 also known as:

Bkav	W32.AIDetectMalware.CS
AVG	Win32:MalwareX-gen [Trj]
MicroWorld-eScan	IL:Trojan.MSILZilla.35656
Skyhigh	PWS-FCQP!77828DD981FC
McAfee	PWS-FCQP!77828DD981FC
Malwarebytes	Malware.AI.1256455463
Zillya	Trojan.Kryptik.Win32.2559607
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	TrojanPSW:MSIL/AgentTesla.f3d5c52e
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.XWM
APEX	Malicious
ClamAV	Win.Trojan.Androm-9850806-0
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	IL:Trojan.MSILZilla.35656
NANO-Antivirus	Trojan.Win32.Agensla.hxwabv
Avast	Win32:MalwareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.115c842b
Emsisoft	IL:Trojan.MSILZilla.35656 (B)
F-Secure	Heuristic.HEUR/AGEN.1304453
DrWeb	BackDoor.SpyBotNET.25
VIPRE	IL:Trojan.MSILZilla.35656
FireEye	Generic.mg.77828dd981fc27da
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.PSW.MSIL.astk
Varist	W32/MSIL_Kryptik.BTF.gen!Eldorado
Avira	HEUR/AGEN.1304453
MAX	malware (ai score=83)
Antiy-AVL	Trojan[PSW]/MSIL.Agensla
Kingsoft	malware.kb.c.992
Microsoft	Trojan:MSIL/AgentTesla.VN!MTB
Arcabit	IL:Trojan.MSILZilla.D8B48
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
GData	IL:Trojan.MSILZilla.35656
Google	Detected
AhnLab-V3	Trojan/Win32.AgentTesla.C4206382
VBA32	TScope.Trojan.MSIL
ALYac	IL:Trojan.MSILZilla.35656
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:lW5zc7qPBu0DrScBDjYGSw)
Ikarus	Trojan.MSIL.Inject
MaxSecure	Trojan.Trojan.WIN32.MSIL.Crypt.gen_187955
Fortinet	MSIL/CoinMiner.XWM!tr
BitDefenderTheta	Gen:NN.ZemsilF.36802.6m1@aStRAcl
DeepInstinct	MALICIOUS

How to remove Malware.AI.1256455463?

Malware.AI.1256455463 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X