Malware.AI.1721880072 (file analysis)

The Malware.AI.1721880072 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1721880072 virus can do?

Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Malware.AI.1721880072?


File Info:
crc32: 8E690757
md5: 1d0f136e421e940b49d8e619bd4952ab
name: 1D0F136E421E940B49D8E619BD4952AB.mlw
sha1: fdf899d7581d96f5b9a46c71a366fa4eb02fa7a8
sha256: 86134fd8c4fc0fa72582863a97e06b256c9f77f863baebe081cd62c3d89aa433
sha512: aacc226155419598ea83e437d49708847dd522d12af8ea790ce0b6cb355f702f7bf19e5f7dce14ab7c5aafde827d5953e4366aadc5adc760449c75879277c3f7
ssdeep: 49152:CJHpmWGU5TBPiwL/hu8fxgt9gxA/eWX+jgr07zNJfAy/SCF50LW3W:YHpmi51iqhu8fxgt9MUZOsgFJm0Mw
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Wextract                
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
FileDescription: Win32 Cabinet Self-Extractor                                           
OriginalFilename: WEXTRACT.EXE            .MUI
Translation: 0x0409 0x04b0

Malware.AI.1721880072 also known as:

K7AntiVirus	Trojan ( 005635331 )
Lionic	Trojan.Win32.KeyLogger.l!c
Elastic	malicious (high confidence)
ALYac	Trojan.GenericKD.46290921
Malwarebytes	Malware.AI.1721880072
Zillya	Trojan.Keylogger.Win32.72426
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	TrojanPSW:Win32/Fareit.c7417cde
K7GW	Trojan ( 005635331 )
Cybereason	malicious.7581d9
Cyren	W64/Trojan.SYPM-8401
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Packed.Themida.DOF
APEX	Malicious
Avast	Win32:SpywareX-gen [Trj]
Cynet	Malicious (score: 99)
Kaspersky	UDS:Trojan-Spy.Win32.KeyLogger
BitDefender	Trojan.GenericKD.46290921
NANO-Antivirus	Trojan.Win32.KeyLogger.ivphsz
MicroWorld-eScan	Trojan.GenericKD.46290921
Ad-Aware	Trojan.GenericKD.46290921
Sophos	Mal/Generic-S (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win64.Dropper.vc
FireEye	Generic.mg.1d0f136e421e940b
Emsisoft	Trojan.GenericKD.46290921 (B)
SentinelOne	Static AI – Malicious SFX
Avira	HEUR/AGEN.1102996
Microsoft	Trojan:Win32/Sabsik.FL.A!ml
Arcabit	Trojan.Generic.D2C257E9
GData	Trojan.GenericKD.46290921
McAfee	Artemis!1D0F136E421E
MAX	malware (ai score=88)
Panda	Trj/CI.A
Ikarus	Trojan.Win32.Themida
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Keylogger!tr
AVG	Win32:SpywareX-gen [Trj]
Paloalto	generic.ml

How to remove Malware.AI.1721880072?

Malware.AI.1721880072 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X