Malware

Malware.AI.1709103474 (file analysis)

Malware Removal

The Malware.AI.1709103474 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1709103474 virus can do?

  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine Malware.AI.1709103474?


File Info:

name: 9315780974B9C30EE2D8.mlw
path: /opt/CAPEv2/storage/binaries/c285a75a37ae3e36c961b55723ef33b39ac1231d86a44cc741a88ff56697d39a
crc32: BC6F6688
md5: 9315780974b9c30ee2d8da23238c1634
sha1: 44e95147d6bb2b3993abda28fa05024c74bbcb13
sha256: c285a75a37ae3e36c961b55723ef33b39ac1231d86a44cc741a88ff56697d39a
sha512: 9073f510bf249f4425c1063c07bc890b87cac53e48842685976d4c6dd4f54f91fe7eec9376f413c7d023d8bc90fb2ad4b1ef9f35fc4eb2ff4901ee8e1665f111
ssdeep: 192:CviIjXhjkGKS43hVOalZ25cWkweOFqReRuTbY4ivsvS9367aOzGvcYOxF9u/2oJ:WRFfB5cWXxkvY4cKfzWjOrA/2o
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B5A2F91B9596E862D4948A3804A7AFBBC97F7D66079B46C3C6443D7E0C323C09D3835B
sha3_384: c50d2c8ac5fa1449ccdab1a67f90ea0ccd012ecd0ef2dd140b5f94b7dd493eee7ce1a1fd2b0eac57c760b7110d2d2fe1
ep_bytes: 64a100000000558bec6aff6800404000
timestamp: 1997-07-23 04:33:44

Version Info:

0: [No Data]

Malware.AI.1709103474 also known as:

LionicTrojan.Win32.Menti.lDxQ
FireEyeGeneric.mg.9315780974b9c30e
McAfeeGenericRXGD-HZ!9315780974B9
CylanceUnsafe
ZillyaTrojan.Menti.Win32.30536
SangforTrojan.Win32.Wacatac.B
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaTrojan:Win32/Menti.4553666a
K7GWTrojan ( 004f86401 )
K7AntiVirusTrojan ( 004f86401 )
BitDefenderThetaGen:NN.ZexaF.34294.byW@aKUuoukb
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.MXJPLAT
TrendMicro-HouseCallTROJ_GEN.R002C0PH321
ClamAVWin.Trojan.TDSS-8864
NANO-AntivirusTrojan.Win32.Menti.wqrrr
AvastWin32:Trojan-gen
RisingTrojan.Generic@ML.95 (RDMK:v4ew56jHnsc1+I/qBDvA4Q)
ComodoMalware@#kcxjm4vkvozg
DrWebTrojan.Siggen6.25946
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PH321
McAfee-GW-EditionGenericRXGD-HZ!9315780974B9
SophosMal/Generic-S
APEXMalicious
JiangminTrojan/Generic.zdlu
WebrootW32.Malware.Gen
AviraHEUR/Patched.Ren
KingsoftWin32.Troj.Generic_a.a.(kcloud)
ViRobotTrojan.Win32.A.Menti.29187
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
VBA32Trojan.Wacatac
MalwarebytesMalware.AI.1709103474
YandexTrojan.Agent!T7q7WrfWqK4
IkarusTrojan.Win32.Menti
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Trojan-gen
PandaGeneric Malware

How to remove Malware.AI.1709103474?

Malware.AI.1709103474 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment