Malware

Malware.AI.2021673517 information

Malware Removal

The Malware.AI.2021673517 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2021673517 virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid

How to determine Malware.AI.2021673517?


File Info:

name: 80FFD796573420CC1B12.mlw
path: /opt/CAPEv2/storage/binaries/d277647c4041d9bbc1702b2f9ab28305ac586f049da3ff54545436e3235b1276
crc32: 0C862161
md5: 80ffd796573420cc1b126e0876fcb29b
sha1: 24462d15bf7ec00a2de5c978ce8683ee13310345
sha256: d277647c4041d9bbc1702b2f9ab28305ac586f049da3ff54545436e3235b1276
sha512: 70239c49c95f5de4b2aeec47a3a2ff53788abb6d59ab16ff2b4a679e64deb8078f4f5cfb221b298e1d37aec6b6f19ab2e9f5db53789a342c8a9338a85b846f37
ssdeep: 96:4ugYypnUqFFv7HBbyTQNSUdWekY9N79qvNmHFkHWYbcbOMpMdlbzNt:ShVTVeQS8kYH918lcCMpMdl9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BA02E809B7F88633EAFE47359CB3514253B6B702D553DA2E68C9510FDC933204AA2B95
sha3_384: 2db954c9e590065c82be3fde9937424b7609e008e53e7ccfcd057de502bfa3fab5e8a3978e29cc5a8b74aa001aec1ad0
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-01-23 14:03:30

Version Info:

Translation: 0x0000 0x04b0
FileDescription: SandStorm
FileVersion: 1.0.8058.10905
InternalName: SandStorm.exe
LegalCopyright: Copyright 2022
OriginalFilename: SandStorm.exe
ProductName: SandStorm
ProductVersion: 1.0.8058.10905
Assembly Version: 1.0.8058.10905

Malware.AI.2021673517 also known as:

LionicTrojan.Win32.Zilla.4!c
MicroWorld-eScanIL:Trojan.MSILZilla.12204
FireEyeIL:Trojan.MSILZilla.12204
McAfeeArtemis!80FFD7965734
CylanceUnsafe
SangforTrojan.Win32.Sabsik.TE
K7AntiVirusTrojan ( 0058d81e1 )
BitDefenderIL:Trojan.MSILZilla.12204
K7GWTrojan ( 0058d81e1 )
ArcabitIL:Trojan.MSILZilla.D2FAC
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Agent.VCG
TrendMicro-HouseCallTROJ_GEN.R002H09AN22
Paloaltogeneric.ml
Ad-AwareIL:Trojan.MSILZilla.12204
SophosMal/Generic-S
ZillyaTrojan.Agent.Win32.2647793
McAfee-GW-EditionArtemis!Trojan
EmsisoftIL:Trojan.MSILZilla.12204 (B)
APEXMalicious
MaxSecureTrojan.Malware.139048359.susgen
MAXmalware (ai score=84)
Antiy-AVLTrojan/Generic.ASMalwS.35190B9
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataIL:Trojan.MSILZilla.12204
CynetMalicious (score: 100)
ALYacIL:Trojan.MSILZilla.12204
MalwarebytesMalware.AI.2021673517
IkarusTrojan.IL.MSILZilla
SentinelOneStatic AI – Malicious PE
FortinetMalicious_Behavior.SB
AVGWin32:TrojanX-gen [Trj]
AvastWin32:TrojanX-gen [Trj]
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Malware.AI.2021673517?

Malware.AI.2021673517 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment