About “Malware.AI.1376222949” infection

The Malware.AI.1376222949 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1376222949 virus can do?

• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Transacted Hollowing
• Deletes executed files from disk
• Modifies Image File Execution Options, indicative of process injection or persistence
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1376222949?

File Info:
name: F806C02A6564F95AD19A.mlw
path: /opt/CAPEv2/storage/binaries/cf0283b9599a40cadbf668430f66cd232e8c32ad929f6f17591d2222783ed763
crc32: 6FE764D8
md5: f806c02a6564f95ad19a6757329a98c0
sha1: 4ab4be8fc0d99a3a08fb38d71842ea9f7dc5f8a4
sha256: cf0283b9599a40cadbf668430f66cd232e8c32ad929f6f17591d2222783ed763
sha512: e379af4a6a8f5d82cd975805290ee94c6c7d9a4049fb389c91358b09b9f66f6a24ebe8c9950c9f70e15e90c2c275af326939744ffc1025bf44eeffd7d3179ba8
ssdeep: 24576:c53uhFAkuG3XbQPNXDmJDOx9PxCFaALW1MJY7BjvP5bojRA3UmYLCKJ6da40jtFa:c5+hFxuuQPpDmJDQ9JQW1McjvhbCR0uI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D3652204BFAB40F6C5A324B29B18774137F5ED224BE055CB17D43207AE27AE2C6799C9
sha3_384: bde430ff5b93652b4c36d5992c482ac692510497708044489f518715ebe244a8944a22023f37d73da8bef0179b87525f
ep_bytes: 558bec6aff6880fa410068f0c4410064
timestamp: 2016-04-02 22:14:34

Version Info:
CompanyName: Google LLC
LegalCopyright: Copyright 2018 Google LLC
ProductName: Google Update
FileVersion: 1.3.36.292
OriginalFilename: GoogleUpdateSetup.exe
FileDescription: Google Update Setup
InternalName: Google Update Setup
ProductVersion: 1.3.36.292
Created: 7z SFX Constructor v4.5.0.0 (http://usbtor.ru/viewtopic.php?t=798)
Builder: Admin 15:53:51 05/08/2023
Translation: 0x0000 0x04b0

Malware.AI.1376222949 also known as:

How to remove Malware.AI.1376222949?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.