Malware

Malware.AI.1928355260 removal

Malware Removal

The Malware.AI.1928355260 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1928355260 virus can do?

  • Uses Windows utilities for basic functionality
  • HTTPS urls from behavior.
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Attempts to identify installed AV products by installation directory
  • Attempts to modify proxy settings
  • Appears to use command line obfuscation
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.1928355260?


File Info:

name: E4B2E04244F5C3AE4F8B.mlw
path: /opt/CAPEv2/storage/binaries/45182981cf99d14a7f680b323d0fc75beb093391bd467205c349b95a08bcd695
crc32: E0C204A4
md5: e4b2e04244f5c3ae4f8b97a7dcb97f68
sha1: b35ec85a440c9c9826aa1a302955e471ccc1e693
sha256: 45182981cf99d14a7f680b323d0fc75beb093391bd467205c349b95a08bcd695
sha512: 4933b2239de2efb07c0e28dce4ea865c89c9b672d0f9a2c3b8df33dc18fcd545ba8e1d0d3e02e91acb0d566180a3203381a2b3e0fc8c3f5304e223fb14be6720
ssdeep: 6144:K8y+bnr+Yp0yN90QErE+i5WUGoq58xygg8nYwfd8xCVh1WEj1DrwOg:8Mroy908WPUx+GWxCnhpg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19374F147ABE94132D9F527706CF107D31A36BCA25E38832B2785B85A1DB36D4A472337
sha3_384: cd73f1b7ea697c4238870ba790753f7768278f272d1f7dd7586498c1b97cd522334e02560d0457ec718609d5e9a17667
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0409 0x04b0

Malware.AI.1928355260 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
FireEyeGen:Heur.Crifi.1
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
McAfeeArtemis!E4B2E04244F5
Cylanceunsafe
ZillyaTrojan.Agent.Win32.3604050
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 00536d121 )
AlibabaTrojanDownloader:Win32/Deyma.5a30fe6e
K7GWTrojan ( 005690671 )
CrowdStrikewin/malicious_confidence_100% (W)
VirITTrojan.Win32.Genus.RPR
CyrenW32/Kryptik.JKR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32multiple detections
APEXMalicious
ClamAVWin.Malware.Doina-10001799-0
KasperskyUDS:Trojan.MSIL.Agent.gen
BitDefenderGen:Heur.Crifi.1
NANO-AntivirusTrojan.Win32.Disabler.jvbbje
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
MicroWorld-eScanGen:Heur.Crifi.1
AvastWin32:TrojanX-gen [Trj]
TencentWin32.Backdoor.Agent.Zmhl
EmsisoftGen:Heur.Crifi.1 (B)
F-SecureTrojan.TR/ATRAPS.Gen
DrWebTrojan.Siggen19.32857
VIPREGen:Heur.Crifi.1
TrendMicroTROJ_GEN.R002C0DGO23
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
SophosTroj/PlugX-EC
SentinelOneStatic AI – Malicious SFX
GDataWin32.Trojan.PSE.12PH8GL
JiangminBackdoor.Mokes.hou
AviraTR/AD.Nekark.sgdjp
Antiy-AVLTrojan/Win32.SmokeLoader
ArcabitTrojan.Crifi.1
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
MicrosoftTrojan:MSIL/plugx!atmn
GoogleDetected
AhnLab-V3Trojan/Win.Mokes.R597042
Acronissuspicious
ALYacGen:Heur.Crifi.1
MAXmalware (ai score=82)
MalwarebytesMalware.AI.1928355260
PandaTrj/Chgt.AD
RisingBackdoor.Mokes!8.619 (TFE:4:7n4IsIjnBDK)
YandexTrojan.Disabler!G6z7qDxyklM
IkarusTrojan.Spy.Stealer
FortinetMSIL/Disabler.DR!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Malware.AI.1928355260?

Malware.AI.1928355260 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment