About “Malware.AI.1508592474” infection

The Malware.AI.1508592474 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1508592474 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.1508592474?


File Info:
name: 19572371644A6DC3A411.mlw
path: /opt/CAPEv2/storage/binaries/d5d3f737bb684846c168fc83c012247adcd20269c9918e511408b231a446f90c
crc32: 9CADDB68
md5: 19572371644a6dc3a411a84c30ca9a5e
sha1: b27f12a4ef6d35514c3bd737366885067e56414f
sha256: d5d3f737bb684846c168fc83c012247adcd20269c9918e511408b231a446f90c
sha512: 2bcc74f0f08416d7adfed7b06da251ca11487f2c5fffcc1a4735665fffd27987dbc27717ffe1fc6ebd23186fa6eb0cc5146c20a2ebf27fbca4bfff3ff7ca9d1e
ssdeep: 3072:BpGOgEYL/wBJKHsev1GDMLCfN09NZtBGLZI1ioXV0GgAwIo9i6iXzCDTZ6ds+:BpG0YYgHseCS97GLyjkhIfI6y+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D0447CED72E04F16D42DB777018A42905BF24212F702EF997DD424E90E87B9B7D0A963
sha3_384: 5b536f447e1ea741a686e6b4b425095f4e22802f9a752d26d41ee488f6861d0048bc9d82fbca5072c1dc4a7bf8766139
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-09-16 00:27:01

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Apollo Panel
FileVersion: 1.0.0.0
InternalName: HWIDC.exe
LegalCopyright: Copyright © l3oy 2018
LegalTrademarks: 
OriginalFilename: HWIDC.exe
ProductName: Apollo Panel
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.1508592474 also known as:

Lionic	Trojan.Win32.Bulz.4!c
MicroWorld-eScan	Gen:Variant.Bulz.770372
FireEye	Gen:Variant.Bulz.770372
McAfee	RDN/Generic.grp
K7AntiVirus	Trojan ( 004e26d51 )
Alibaba	Trojan:MSIL/Kryptik.debe4b78
K7GW	Trojan ( 004e26d51 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.FSX
APEX	Malicious
BitDefender	Gen:Variant.Bulz.770372
Avast	Win32:Trojan-gen
Ad-Aware	Gen:Variant.Bulz.770372
Emsisoft	Gen:Variant.Bulz.770372 (B)
TrendMicro	TROJ_GEN.R002C0PKO21
McAfee-GW-Edition	RDN/Generic.grp
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Bulz.770372
eGambit	Unsafe.AI_Score_99%
Avira	TR/Kryptik.obqvm
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C4683316
BitDefenderTheta	Gen:NN.ZemsilCO.34294.pm0@a4cEZJb
ALYac	Gen:Variant.Bulz.770372
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.1508592474
TrendMicro-HouseCall	TROJ_GEN.R002C0PKO21
Tencent	Win32.Trojan.Bulz.Dygt
Yandex	Trojan.Kryptik!V1x4E3heuKI
Ikarus	Trojan.MSIL.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.FSX!tr
AVG	Win32:Trojan-gen

How to remove Malware.AI.1508592474?

Malware.AI.1508592474 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X