Malware

Malware.AI.177643261 (file analysis)

Malware Removal

The Malware.AI.177643261 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.177643261 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Presents an Authenticode digital signature
  • Dynamic (imported) function loading detected
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Attempts to identify installed AV products by installation directory
  • Anomalous binary characteristics

How to determine Malware.AI.177643261?


File Info:

name: 96F396CEB7E0CC573BA3.mlw
path: /opt/CAPEv2/storage/binaries/9f962d6f7d4bebd8221aa8da8407e8d39ccf647f1185492bbe1d9c52e61a0419
crc32: C6B149D6
md5: 96f396ceb7e0cc573ba3f9a0d14acb88
sha1: 91aec3624226425c029847f70857a918de8ebe81
sha256: 9f962d6f7d4bebd8221aa8da8407e8d39ccf647f1185492bbe1d9c52e61a0419
sha512: 0ca9a0c938ab6f36115195a39ccf45a005346f36b994e012d2aa6d41e9f133ce9230dff704bc4641d633725af9b60b0d1c6986f43aaa80be5677bffafa5f5123
ssdeep: 24576:aEpQQJvKPzvYZHTHy7vaewsAj9A7wnNTBpu5vPOTND:7KPzvoS7yljGwnNTBpu5HOTx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E3557D21B7F4C035E2B30A706EB9D72655BEBD711B71824FA3A4765E0D31AC19A30B27
sha3_384: e25d87ff01a32270bb60141562c79c059846500325ad9b472e55faef20e5b704a16d75c04b69253e1e7754f9e8151a39
ep_bytes: e805000000e999bb0000558bec83ec10
timestamp: 2006-10-27 21:57:25

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft Setup Bootstrapper
FileVersion: 12.0.4518.1014
InternalName: setup.exe
LegalCopyright: © 2006 Microsoft Corporation. All rights reserved.
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: setup.exe
ProductName: Microsoft Setup Bootstrapper
ProductVersion: 12.0.4518.1014
Translation: 0x0000 0x04e4

Malware.AI.177643261 also known as:

LionicTrojan.Win32.Malicious.4!c
Elasticmalicious (high confidence)
MalwarebytesMalware.AI.177643261
CyrenW32/Ipamor.U.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
ClamAVWin.Ransomware.WannaCry-9856297-0
AvastFileRepMalware
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.BadFile.th
IkarusVirus.Win32.VB
GDataWin32.Trojan.PSE.JM7ODA
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
McAfeeArtemis!96F396CEB7E0
VBA32Trojan.Downloader
CylanceUnsafe
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Emotet.212B!tr
AVGFileRepMalware
CrowdStrikewin/malicious_confidence_80% (D)

How to remove Malware.AI.177643261?

Malware.AI.177643261 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment