Malware.AI.1637125407 information

The Malware.AI.1637125407 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1637125407 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous .NET characteristics
Anomalous binary characteristics

How to determine Malware.AI.1637125407?


File Info:
name: 4068B610BA8FF4C55D14.mlw
path: /opt/CAPEv2/storage/binaries/321eb019f132190fe10d64621dec1106c75846514b32e4cb02065cde86dad074
crc32: 9810F550
md5: 4068b610ba8ff4c55d14624d2e92a512
sha1: c7e4ad5dfa8f697e1ea1d8e2a050a7fc9e14bc04
sha256: 321eb019f132190fe10d64621dec1106c75846514b32e4cb02065cde86dad074
sha512: de7ccbea14dad91f53986f67b67cace204b70f128d7b219d80794ca718a43c96ebe3ef9d7f97bb97ba0d69f9a253c9d0dc2559dd539dbcdc9493cb05df072ce2
ssdeep: 6144:NE4/8tWsxqDlQTYKsiiuiDHtoH9H4tGU:NTaSlQ0a6DHtoH9H4t
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T15924728F7F06249FE8E709356A750C302586F42D297BA867B18772FD684F0E39B19613
sha3_384: fb4002baa56454a5057911bdff5fb0d7f8a5ad706c16681bba95fe7dbede93811b793bf905eef95defd008038c4012d1
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2021-10-07 05:28:39

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: Wqe.exe
LegalCopyright:  
OriginalFilename: Wqe.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Malware.AI.1637125407 also known as:

Lionic	Trojan.MSIL.Agensla.i!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.415298
ALYac	Gen:Variant.Bulz.415298
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 00569be91 )
Alibaba	TrojanPSW:MSIL/Agensla.15f4d248
K7GW	Trojan ( 00569be91 )
CrowdStrike	win/malicious_confidence_90% (W)
Arcabit	Trojan.Bulz.D65642
ESET-NOD32	a variant of Win32/Agent.ACBZ
APEX	Malicious
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Gen:Variant.Bulz.415298
Avast	Win32:CrypterX-gen [Trj]
Tencent	Msil.Trojan-qqpass.Qqrob.Pabw
Ad-Aware	Gen:Variant.Bulz.415298
Sophos	Mal/Generic-S
DrWeb	Trojan.PackedNET.335
McAfee-GW-Edition	BehavesLike.Win64.Infected.dm
Ikarus	Trojan.Win32.Agent
Webroot	W32.Trojan.MSIL.AGensla
Avira	HEUR/AGEN.1130328
Microsoft	Backdoor:Win32/Bladabindi!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Generic.C2989270
McAfee	Artemis!4068B610BA8F
VBA32	TrojanPSW.MSIL.Agensla
Malwarebytes	Malware.AI.1637125407
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.ACBZ!tr
AVG	Win32:CrypterX-gen [Trj]

How to remove Malware.AI.1637125407?

Malware.AI.1637125407 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X