Malware

Malware.AI.1329046134 information

Malware Removal

The Malware.AI.1329046134 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1329046134 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • A file was accessed within the Public folder.
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Touches a file containing cookies, possibly for information gathering
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1329046134?


File Info:

name: 3D295258486AB7BC08D0.mlw
path: /opt/CAPEv2/storage/binaries/12bc4e7127b2a218d775805476a8bb2790a98f6df75e21a89c392ce91a25a6ee
crc32: 0657CA9F
md5: 3d295258486ab7bc08d0df3b0a8c508e
sha1: 1de6ea5e8578a2c69efc5db67f9f347c7565553d
sha256: 12bc4e7127b2a218d775805476a8bb2790a98f6df75e21a89c392ce91a25a6ee
sha512: 695204abf896d102a941371e91c438681ed585a9081b4c323f9e2183db227438e170701bf9cf4bec5e0943ac14338477eeadef9252e5b71b00100bd4dd041619
ssdeep: 98304:JWhuXBOBfKnRwhfgzqXb/F8qfj1z+xGEn8wSfGGjLxabw6O6lp:x/n2hfbiqQsEnLSfGOkO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T157E5230379C49072D62316321EB4A31AB63EF8301F5AD7CB67859DAEFE305C157366A2
sha3_384: 4dedb8af691f583c0dbd917bd2f86f2dd1a5070d17932e7dede17ffc8240d2b99857f6cf5ec2065d9bd3ef7fcdf15365
ep_bytes: e8a6040000e978feffffcccccccccccc
timestamp: 2023-08-01 09:26:22

Version Info:

ProductName: WinRAR
CompanyName: Alexander Roshal
FileDescription: WinRAR archiver
FileVersion: 6.23.0
ProductVersion: 6.23.0
InternalName: WinRAR
LegalCopyright: Copyright © Alexander Roshal 1993-2023
OriginalFilename: WinRAR.exe
Translation: 0x0409 0x04e4

Malware.AI.1329046134 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Zenpak.tspQ
MicroWorld-eScanTrojan.Patched.SAP.Gen
FireEyeGeneric.mg.3d295258486ab7bc
McAfeeMalHeur-FAG!3D295258486A
MalwarebytesMalware.AI.1329046134
VIPRETrojan.Patched.SAP.Gen
SangforTrojan.Win32.Patched.Vqb8
AlibabaTrojan:Win32/Shelma.d385b7fa
Cybereasonmalicious.8486ab
SymantecTrojan.Gen.6
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Patched.JD
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Shelma.cges
BitDefenderTrojan.Patched.SAP.Gen
AvastWin32:Malware-gen
TencentWin32.Trojan.Shelma.Ijgl
SophosMal/Generic-S
TrendMicroTROJ_GEN.R014C0DHE23
McAfee-GW-EditionBehavesLike.Win32.Dropper.wc
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.Patched.SAP.Gen (B)
SentinelOneStatic AI – Suspicious PE
GDataTrojan.Patched.SAP.Gen
GridinsoftTrojan.Win32.Gen.bot
ArcabitTrojan.Patched.SAP.Gen
ZoneAlarmTrojan.Win32.Shelma.cges
MicrosoftTrojan:Win32/Swrort.A
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36350.jB0@aGTDMZmi
ALYacTrojan.Patched.SAP.Gen
MAXmalware (ai score=85)
VBA32BScope.Trojan.Swrort
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R014C0DHE23
RisingTrojan.Generic@AI.100 (RDML:CIFhqmOo+tMwcXNkHikwfQ)
FortinetW32/Patched.IX!tr
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.1329046134?

Malware.AI.1329046134 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment