Malware.AI.1682387036 (file analysis)

The Malware.AI.1682387036 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1682387036 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.1682387036?


File Info:
name: FA3E53551FD3622A1681.mlw
path: /opt/CAPEv2/storage/binaries/af4cbbf3d58eb1339c48ac138565dcaa38eb985e75e681428a73ac8f51e6a50c
crc32: 807CE9FD
md5: fa3e53551fd3622a1681bf58bb031df5
sha1: 38b57415742fe3a0ba578040fff9f4534a998336
sha256: af4cbbf3d58eb1339c48ac138565dcaa38eb985e75e681428a73ac8f51e6a50c
sha512: e6afae80ac3b7cbf4609e52a972f297976ef7ec69f32e079df1058800a6ea7d21167bc7363c93b53f7087b948c3f907251008bd93cd6f1e2d070abdb4bdcd7f4
ssdeep: 24576:TM84pSYH8bRtUcazumXRLssVf1k8LOsDFncLmKDZOSzXFZ:TM84pRZ9VfWuEz
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T195858D3DFFA08C36D6A206319961D32D693DBE201B119557B388BA1EE970FD1767B203
sha3_384: 6a3dfef32bceec705c13c5af9e9163dd70cb2be6765df459deabca25cbdfe54b3e0cf41e766b8e50e6653788a5d61967
ep_bytes: e85f3c0000e97bfeffffcccccc8b5424
timestamp: 2015-12-11 23:37:11

Version Info:
CompanyName: Microsoft Corporation
FileDescription: AppVDllSurrogate32
InternalName: AppVDllSurrogate
LegalCopyright: Copyright © 2014 Microsoft Corporation
LegalTrademarks: Microsoft® is a registered trademark of Microsoft Corporation.
OriginalFilename: AppVDllSurrogate32.exe
ProductName: Microsoft Application Virtualization (App-V)
FileVersion: 5.0.10334.0
ProductVersion: 5.0.10334.0
PrivateBuild: 50sp3Servicing (by sftbuild on MBAMR02BLD01)
Translation: 0x0409 0x04b0

Malware.AI.1682387036 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
FireEye	Generic.mg.fa3e53551fd3622a
Sangfor	Trojan.Win32.Save.a
Cyren	W32/Ipamor.AI.gen!Eldorado
ClamAV	Win.Malware.Dqan-9882956-0
Avast	Win32:Malware-gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.tm
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Agent
Avira	HEUR/AGEN.1205450
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
VBA32	Trojan.Wacatac
Malwarebytes	Malware.AI.1682387036
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Ipamor.883D!tr
AVG	Win32:Malware-gen
CrowdStrike	win/grayware_confidence_70% (W)

How to remove Malware.AI.1682387036?

Malware.AI.1682387036 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X