About “Malware.AI.191126234” infection

The Malware.AI.191126234 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.191126234 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.191126234?


File Info:
name: 6E61563608B4C3A1A361.mlw
path: /opt/CAPEv2/storage/binaries/9ae798c39e631370e7b9250fcf68f55fabbb2a8b5fc417a5c9d8169319bdc072
crc32: EB8C582E
md5: 6e61563608b4c3a1a361fddc9350a522
sha1: c15f92dc16770521be25614532fb1d880065b4cc
sha256: 9ae798c39e631370e7b9250fcf68f55fabbb2a8b5fc417a5c9d8169319bdc072
sha512: c7b60454a4d31b1ddbc2ae3442f2fdb1255cfee9f3e7a26c9dacc45be41bf60acbb4203f26a4ef9ab15c971885da14fc3fb2bff5ae57d764cf7314771cd7170d
ssdeep: 49152:8fDMrOO53RTqtiMv9Mgn1d3So72nMbzN9DtoZs:XrOO53k9nnh7DNwy
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1A1C59D12B6A5C036E1B306B15EB6E7A95839FE311F21AA8773D03F9D2E315C19935323
sha3_384: 1bd98fc0cfec2d0365c414c03cea693550b3cda594a57d44af19910fa63575941066c724d04e205c7d62e621ab9c9d17
ep_bytes: e826670000e97bfeffffe8245700008b
timestamp: 2015-12-17 03:29:03

Version Info:
Comments: 
LegalCopyright: License: MPL 2
CompanyName: Mozilla Corporation
FileDescription: Plugin Hang UI for Firefox
FileVersion: 43.0.1
ProductVersion: 43.0.1
InternalName: Firefox
LegalTrademarks: Mozilla
OriginalFilename: plugin-hang-ui.exe
ProductName: Firefox
BuildID: 20151216175450
Translation: 0x0000 0x04b0

Malware.AI.191126234 also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.6e61563608b4c3a1
Sangfor	Trojan.Win32.Save.a
Cyren	W32/Autorun.EL.gen!Eldorado
tehtris	Generic.Malware
ClamAV	Win.Malware.Bulz-9859378-0
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	Artemis
SentinelOne	Static AI – Malicious PE
Jiangmin	Packed.Krap.gvto
Google	Detected
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!6E61563608B4
VBA32	Backdoor.Swz
Malwarebytes	Malware.AI.191126234
Ikarus	Trojan.Msil
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Autorun.0E79!tr

How to remove Malware.AI.191126234?

Malware.AI.191126234 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X