Malware.AI.1975493791 (file analysis)

The Malware.AI.1975493791 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1975493791 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1975493791?


File Info:
name: F79C094862CE5DA278A3.mlw
path: /opt/CAPEv2/storage/binaries/86d28d7b5613921068da7a49e3e02afff7dbbbc53d0bdb66429d9557f2c5c66d
crc32: CB8943A8
md5: f79c094862ce5da278a3a8a6e4183244
sha1: eb8c4bd937ddd92b229e89d036ecb3d83d2a5cb2
sha256: 86d28d7b5613921068da7a49e3e02afff7dbbbc53d0bdb66429d9557f2c5c66d
sha512: 7f2895ee0e46b405cc9063efcf48a6b70e6285bd9a422fdebda77b6af2ac5a9c941e83984f317dd3c24164b25a1c45a345a1df47afb13e59f5cfcbf39e1818bb
ssdeep: 24576:9FayjEACotnrecq89Gi/TRORTV//rM3hQotx968wX6+2iZ5+PUm4eJWm:7Lg5odqYBTROghQotxcc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D3654A33DD07E44EDE828072143655A929192D3590664D0BB3CEBD8A2377AE3BDF462F
sha3_384: b9ccd847d5dc940ec7010ab8d0fb1e22f7de621e6d223e45a57a5e764bc146a372114c7408237fe353b3864b4e84174f
ep_bytes: 68d4bd4000e8eeffffff000000000000
timestamp: 2023-11-24 02:10:51

Version Info:
Translation: 0x0409 0x04b0
Comments: This Program is Free!
CompanyName: https://topersoft.com
FileDescription: Launcher for GoodbyeDPI
LegalCopyright: Program by TOPER © 2023
LegalTrademarks: TOPERSOFT © 2017-2023
ProductName: Launcher for GoodbyeDPI
FileVersion: 6.04
ProductVersion: 6.04
InternalName: Launcher for GoodbyeDPI
OriginalFilename: Launcher for GoodbyeDPI.exe

Malware.AI.1975493791 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.GoodbyeDPI.4!c
Cynet	Malicious (score: 100)
Skyhigh	BehavesLike.Win32.Infected.th
McAfee	GenericRXAA-FA!F79C094862CE
Cylance	unsafe
Sangfor	Trojan.Win32.Goodbyedpi.V3ll
K7AntiVirus	Unwanted-Program ( 005a69e81 )
K7GW	Unwanted-Program ( 005a69e81 )
CrowdStrike	win/malicious_confidence_70% (W)
BitDefenderTheta	Gen:NN.ZevbaF.36680.wn1@ay6Eifli
ESET-NOD32	a variant of Win32/GoodbyeDPI_AGen.A potentially unsafe
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Sophos	Generic Reputation PUA (PUA)
Ikarus	PUA.GoodbyeDPI
Antiy-AVL	RiskWare/Win32.GoodbyeDPI
Kingsoft	malware.kb.a.977
AhnLab-V3	Malware/Win32.RL_Generic.R334100
Malwarebytes	Malware.AI.1975493791
Rising	PUF.GoodbyeDPI!8.13BB4 (TFE:5:dd178JEKFcD)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.220741684.susgen
Fortinet	Riskware/GoodbyeDPI_AGen
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.937ddd
DeepInstinct	MALICIOUS

How to remove Malware.AI.1975493791?

Malware.AI.1975493791 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X