What is “Malware.AI.1729720859”?

The Malware.AI.1729720859 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1729720859 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.1729720859?


File Info:
name: FA6D7C273F7AFAD0D8FB.mlw
path: /opt/CAPEv2/storage/binaries/bbc54bbba96e999894eb3a042ac9b89c4ad13dcc8d7afd67ad7d26fd55456fba
crc32: 00483B20
md5: fa6d7c273f7afad0d8fb04458f245f5c
sha1: 88ad18edc9e13660d8ff24988979e213b18ef56c
sha256: bbc54bbba96e999894eb3a042ac9b89c4ad13dcc8d7afd67ad7d26fd55456fba
sha512: 3b59937480a7b57f9c901efdd9cb480b910fe2887736bab373bc345b370410eb87f95aa45c74bd65fecb7d12eede55efe728d910f2a94b624269ea73530a1891
ssdeep: 3072:dXrImHk1oQ9kFuCsu+tvJCO+jl35U1cSiXo6b3r0:dEmE1oZFmGSzb6bb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T115C36C2C87DCCB32E5AE66BCE172416043B581463513F35B8EE2E8B53B637570905BEA
sha3_384: e65c7c8566c990ce50a6fd48f8ecf09e72f80e89bfd8259ddfdfaa2e37d5d8b6be1ce69c0ca0836b6e6a476387fd33de
ep_bytes: ff250020400000000000000000000000
timestamp: 2100-11-09 01:32:29

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: Stub.exe
LegalCopyright: Copyright ©  2019
LegalTrademarks: 
OriginalFilename: Stub.ex
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.1729720859 also known as:

Lionic	Trojan.Win32.Crysan.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.459797
Skyhigh	BehavesLike.Win32.RealProtect.ch
McAfee	PWS-FCQR!FA6D7C273F7A
Malwarebytes	Malware.AI.1729720859
VIPRE	Gen:Variant.Zusy.459797
Sangfor	Backdoor.Msil.Crysan.Vzwd
K7AntiVirus	Trojan ( 00550dd41 )
Alibaba	Backdoor:MSIL/Crysan.fcb427ac
K7GW	Trojan ( 00550dd41 )
BitDefenderTheta	Gen:NN.ZemsilF.36738.hm0@aqnObKl
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of MSIL/Agent.CAK
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
BitDefender	Gen:Variant.Zusy.459797
NANO-Antivirus	Trojan.Win32.Crysan.kbzqsu
Avast	Win32:BackdoorX-gen [Trj]
Tencent	Malware.Win32.Gencirc.11b74bee
TACHYON	Backdoor/W32.DN-Crysan.129536.B
Emsisoft	Gen:Variant.Zusy.459797 (B)
TrendMicro	TROJ_GEN.R03BC0PJA23
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.fa6d7c273f7afad0
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Zusy.459797
Jiangmin	Trojan.Generic.hpfhi
Google	Detected
Antiy-AVL	Trojan[Backdoor]/MSIL.Crysan
Kingsoft	malware.kb.c.996
Arcabit	Trojan.Zusy.D70415
ViRobot	Trojan.Win.Z.Zusy.129536.S
ZoneAlarm	HEUR:Backdoor.MSIL.Crysan.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Varist	W32/MSIL_Agent.BTI.gen!Eldorado
AhnLab-V3	Trojan/Win.Tiggre.C5488669
VBA32	OScope.Backdoor.MSIL.Crysan
ALYac	Gen:Variant.Zusy.459797
MAX	malware (ai score=83)
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Backdoor.Crysan!8.10ECA (CLOUD)
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:BackdoorX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Malware.AI.1729720859?

Malware.AI.1729720859 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X