Should I remove “Malware.AI.1312535356”?

The Malware.AI.1312535356 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1312535356 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.1312535356?


File Info:
name: 759E94B15AD27EA2FB09.mlw
path: /opt/CAPEv2/storage/binaries/5bb6155ebfa9b2c40a4c479d1a98ab588bd7f1993af5117ee7f93dc44eb0414f
crc32: 2D549271
md5: 759e94b15ad27ea2fb09c3e22c840fdc
sha1: 97574b2fcbad55d54c8418f006104f663cfcc5bb
sha256: 5bb6155ebfa9b2c40a4c479d1a98ab588bd7f1993af5117ee7f93dc44eb0414f
sha512: 2f0bfbe62f96807a7dcc22ec1a9257af4a4129e5c11ef5cd6f2f0d3b9ddc676b6cf0a999863a369285e33bb6abf0cceced059c738c22713f7b7897a4f81fba86
ssdeep: 49152:KrSqGg5FCStXA4ZFowisV2Fe1hR+H6GfThIqN22Bzbz/Z3R7eEnR266lnoVWYz4X:U+gXnVSe1hRS1+fsG1Ck
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T134664852BEC83025C26F243435AE959C887AAE11DF0DC4D776AC7A8C8F3D049E467E67
sha3_384: 51ae058fba476f95c2a4aab1682281d11a597e779b88577c16f8e4a76c1c507b234ae0ee24352b720f7b7041d7378ba5
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-04-24 05:03:04

Version Info:
Translation: 0x0000 0x04b0
CompanyName: Microsoft
FileDescription: Crack downmienphi.com
FileVersion: 1.0.0.0
InternalName: Patch.exe
LegalCopyright: Copyright © Microsoft 2016
OriginalFilename: Patch.exe
ProductName: Crack downmienphi.com
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.1312535356 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.981974
FireEye	Generic.mg.759e94b15ad27ea2
ALYac	Gen:Variant.Razy.981974
Cylance	Unsafe
Sangfor	Riskware.Win32.Wacapew.C
K7AntiVirus	Riskware ( 00513a491 )
K7GW	Riskware ( 00513a491 )
Cybereason	malicious.fcbad5
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Riskware.HackTool.Agent.Z
TrendMicro-HouseCall	TROJ_GEN.R002C0PJ621
Paloalto	generic.ml
BitDefender	Gen:Variant.Razy.981974
Avast	Win32:Malware-gen
Tencent	Msil.Risk.Riskware.Ahys
Ad-Aware	Gen:Variant.Razy.981974
Sophos	Generic ML PUA (PUA)
Comodo	Malware@#emrjgjgy0zc7
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PJ621
McAfee-GW-Edition	PUP-XCQ-XK
Emsisoft	Gen:Variant.Razy.981974 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Gen:Variant.Razy.981974
McAfee	PUP-XCQ-XK
MAX	malware (ai score=98)
Malwarebytes	Malware.AI.1312535356
APEX	Malicious
Yandex	Riskware.HackTool!8yrO6qeZkpY
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/HackTool_Agent
Webroot	W32.Malware.Gen
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A

How to remove Malware.AI.1312535356?

Malware.AI.1312535356 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X