What is “Malware.AI.1994647370”?

The Malware.AI.1994647370 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1994647370 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.1994647370?


File Info:
name: 43D8ED6132BE416EB43B.mlw
path: /opt/CAPEv2/storage/binaries/c7d2bc34d20599a958e4052edb80864604f5f8b1cbbb429679341c5c88d5f62c
crc32: 6BA6C055
md5: 43d8ed6132be416eb43be296faf00534
sha1: 6faa76d38c5f89becea8cf73be41d67d6cda1cc0
sha256: c7d2bc34d20599a958e4052edb80864604f5f8b1cbbb429679341c5c88d5f62c
sha512: 1373b9c13aacc52b49d594fb5a0e9a0c22f983bccec1f194e2a5ea46db358d4a44521006d5fee77a1d8ab5e69fceb5a773c1ffada0b56b9c63c1838a64f8fcfb
ssdeep: 6144:TXMwqq8r/1MW4WqEPmz3zWz6Oxacv2yziEWqCCTVtd:z6qUHuLyGOAbT/cTvd
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T141542BA0F696FDBAE9558FBD14F11309429EE2C0E71DEB333860FD380159A5C46B364A
sha3_384: 97bb94e6d91b8c4554003751714215845bb03c64844ca5a17f5c6cde6746195bfb0cb5b433093ae5dc6c6f0ecfd692e2
ep_bytes: 83ec0cc7059453400000000000e81e03
timestamp: 2022-09-02 06:00:42

Version Info:
0: [No Data]

Malware.AI.1994647370 also known as:

Cynet	Malicious (score: 100)
FireEye	Generic.mg.43d8ed6132be416e
CAT-QuickHeal	Trojan.WacatacPMF.S18309451
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.38c5f8
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Sophos	Generic ML PUA (PUA)
F-Secure	Heuristic.HEUR/AGEN.1231916
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1231916
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R360765
Malwarebytes	Malware.AI.1994647370
Rising	Trojan.Generic@AI.95 (RDMK:cmRtazps22zM7/Jn5RV3fQhzUfo+)
Ikarus	Trojan.Win32.Reverseshell
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Jaik.6340!tr
BitDefenderTheta	Gen:NN.ZexaF.34606.r8Y@aiM1PPm

How to remove Malware.AI.1994647370?

Malware.AI.1994647370 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X