About “Malware.AI.1539908003” infection

The Malware.AI.1539908003 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1539908003 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.1539908003?


File Info:
name: 25FC1CED8D0279219936.mlw
path: /opt/CAPEv2/storage/binaries/51b1a59f4f0572e5a63bf27bffc657099d3bf3ed182ff9f1f09753fafba00694
crc32: C09623F1
md5: 25fc1ced8d027921993654381971b617
sha1: 231bec767f419f5fc55d2cd9a0da9af1e88c62df
sha256: 51b1a59f4f0572e5a63bf27bffc657099d3bf3ed182ff9f1f09753fafba00694
sha512: 5d5d8bf04ac61c413789294c7ad5bbefecf8538036ce04ffc6faf9f805c46b79c823fbfe460f81a4c83bd13ebe1a0fb0e283a955d9ac982fa7d42ce04cf02c16
ssdeep: 3072:zGwC+n97SXg7jjnp5LFInw6RYDgWLMm4snkWrZBSG4O8w:9n97Sw7HpvIILMJs
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CC6461977FE09277C7F2D1318C3993B849A29810FB5D328E1734A16D647AA814ABDD0F
sha3_384: d5a662ea1a1f68ea8ec655371e1f95361524da2e1e7a351e83093cb6dba976b00d1b0e20b8619931329d4620d5c15b4e
ep_bytes: ff250020400000000000000000000000
timestamp: 2051-04-01 10:58:15

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: MAXCARE
FileVersion: 1.0.0.0
InternalName: MAXCARE.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: MAXCARE.exe
ProductName: MAXCARE
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.1539908003 also known as:

Lionic	Trojan.Win32.Ursu.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.29975
MicroWorld-eScan	Gen:Variant.MSILHeracles.10325
FireEye	Generic.mg.25fc1ced8d027921
McAfee	RDN/Generic PWS.y
Cylance	Unsafe
Sangfor	Infostealer.MSIL.Stealer.gen
Cybereason	malicious.d8d027
BitDefenderTheta	Gen:NN.ZemsilF.34182.um0@aKCL42c
Cyren	W32/MSIL_Troj.NT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-PSW.MSIL.Stealer.gen
BitDefender	Gen:Variant.MSILHeracles.10325
NANO-Antivirus	Trojan.Win32.Stealer.iocaqc
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.MSILHeracles.10325 (B)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PB522
McAfee-GW-Edition	BehavesLike.Win32.Generic.fm
Sophos	Generic PUA CD (PUA)
Ikarus	Trojan.MSIL.PSW
Avira	TR/PSW.Stealer.svrga
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.MSILHeracles.10325
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.C4586460
VBA32	Worm.Bundpil
ALYac	Gen:Variant.MSILHeracles.10325
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.1539908003
TrendMicro-HouseCall	TROJ_GEN.R002C0PB522
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:SGVP4K0hvDHyiCyZS63dOg)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.101478219.susgen
Fortinet	MSIL/Agent.SFV!tr.pws
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Malware.AI.1539908003?

Malware.AI.1539908003 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X