Malware

Malware.AI.1344988730 (file analysis)

Malware Removal

The Malware.AI.1344988730 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1344988730 virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.1344988730?


File Info:

name: 2647438BF02E4C79EB68.mlw
path: /opt/CAPEv2/storage/binaries/6efcc4a4e2266d261ba0767a208486e8af01119f958a68ff5eaf8b87e88b0210
crc32: 3976B859
md5: 2647438bf02e4c79eb68bfea2b1ea473
sha1: 794534dd17d2b5772bd7b3f29d2a1774285e0815
sha256: 6efcc4a4e2266d261ba0767a208486e8af01119f958a68ff5eaf8b87e88b0210
sha512: 71bda4d48862e3e437dd485b95620e650df765e2f5d5352a32cc478c8f503bba7d966b28cd687553837643046b4b537e0eca74df7d4752bfe99f083ac81759cb
ssdeep: 768:ZaPepnR/AY2jWeefzdB6NN46Ag6BqJHGKJ//Wf+KEwfk/:ZaPi2Yq4dB4q2JHGKZW06k/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A6337D0275A0C073C84689B05971C553AE6EBE626BE5C0877B9D339EAF727D2173A306
sha3_384: 1e85b3361084160538a5c9b3116319d5e0c88498f971684f13a67abf77512cecdf19769415dfb63892a40e0c92e33133
ep_bytes: e841150000e979feffffe92ce0000000
timestamp: 2012-03-15 11:39:12

Version Info:

0: [No Data]

Malware.AI.1344988730 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Zusy.4!c
Elasticmalicious (high confidence)
CAT-QuickHealTrojan.GenericPMF.S30142465
MalwarebytesMalware.AI.1344988730
SangforTrojan.Win32.Wacatac.V7ke
K7AntiVirusTrojan ( 005a81c81 )
AlibabaTrojan:Win32/Generic.c64b1327
K7GWTrojan ( 005a81c81 )
CrowdStrikewin/malicious_confidence_70% (W)
BitDefenderThetaGen:NN.ZexaE.36350.duX@aWH7Zdai
CyrenW32/Zusy.QI.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.RopProof.A suspicious
AvastWin32:Evo-gen [Trj]
TencentPacked.Win32.Agent.kkh
F-SecureTrojan.TR/Agent_AGen.nbemq
TrendMicroTROJ_GEN.R002C0PEL23
McAfee-GW-EditionBehavesLike.Win32.Eggnog.qh
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
AviraTR/Agent_AGen.nbemq
Antiy-AVLTrojan/Win32.Wacatac
ViRobotTrojan.Win.Z.Wacatac.52080.M
GDataWin32.Trojan.PSE.RSF2LI
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R579270
McAfeeGenericRXVY-UB!2647438BF02E
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0PEL23
RisingTrojan.Generic@AI.100 (RDML:EnkdEZdxwpiFajoHW3tK0w)
IkarusTrojan.Win32.Agent
FortinetW32/Wacatac.B!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS

How to remove Malware.AI.1344988730?

Malware.AI.1344988730 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment