Malware.AI.1496332886 (file analysis)

The Malware.AI.1496332886 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1496332886 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Malware.AI.1496332886?


File Info:
name: 02B971A041014F11CD96.mlw
path: /opt/CAPEv2/storage/binaries/2ce64bb0dc341b10f1148c5a43c626c096537d5984d52dd0ae47bba235cf5e87
crc32: 2195925D
md5: 02b971a041014f11cd962186b4b18871
sha1: 291feac491dfb98f6f043f9f87f20b133f5a64b8
sha256: 2ce64bb0dc341b10f1148c5a43c626c096537d5984d52dd0ae47bba235cf5e87
sha512: da713bf6eb641801361550d33cb4711becc6f41391cbd53e4a48cfbfc6b71eab74f26e8db55a633ff865b559c842a4d6c617f697a5e2eb3fbdcdac7510d0249d
ssdeep: 12288:nmBPK9KuKAcxpJe3lYEphb07ntc/7nti4ZFzbH/KinDexmasyOpU7nt2:4dalYEpK7tc/7t3jOcakU7t2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17EA53D1E66185137CDEABE75CEBC440B77A4EBC2399546FA30927FBA2D32B00C561712
sha3_384: 1d134bb8ba94bb1bef5fb630dc7c6cd2e2fbc651c3e6d6a93c11d2fc6a261bc9602ce5947364d882790d1b4725bb2ae3
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-10-15 10:46:02

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: CaxxaMix
FileVersion: 1.0.385.0
InternalName: CaxxaMix.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: CaxxaMix.exe
ProductName: CaxxaMix
ProductVersion: 1.0.385.0
Assembly Version: 1.0.385.0

Malware.AI.1496332886 also known as:

Lionic	Trojan.MSIL.Startun.4!c
MicroWorld-eScan	Trojan.GenericKD.47225234
FireEye	Trojan.GenericKD.47225234
McAfee	GenericRXQJ-VT!02B971A04101
Cylance	Unsafe
Sangfor	Trojan.MSIL.Startun.gen
Alibaba	Trojan:MSIL/Startun.ba63c3ed
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.MSIL.Startun.gen
BitDefender	Trojan.GenericKD.47225234
Avast	Win32:MalwareX-gen [Trj]
Tencent	Msil.Trojan.Startun.Eyj
Ad-Aware	Trojan.GenericKD.47225234
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R03AC0PJO21
McAfee-GW-Edition	GenericRXQJ-VT!02B971A04101
Emsisoft	Trojan.GenericKD.47225234 (B)
GData	Trojan.GenericKD.47225234
Avira	TR/Redcap.vtssb
Antiy-AVL	Trojan/Generic.ASMalwS.34C562F
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Malware/Win32.RL_Generic.R299016
ALYac	Trojan.GenericKD.47225234
MAX	malware (ai score=87)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.1496332886
TrendMicro-HouseCall	TROJ_GEN.R03AC0PJO21
Yandex	Trojan.Startun!nNDhxcWaNkY
SentinelOne	Static AI – Suspicious PE
Fortinet	PossibleThreat
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen

How to remove Malware.AI.1496332886?

Malware.AI.1496332886 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X