Malware

What is “Malware.AI.2169207164”?

Malware Removal

The Malware.AI.2169207164 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2169207164 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • NtSetInformationThread: attempt to hide thread from debugger
  • Dynamic (imported) function loading detected
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Malware.AI.2169207164?


File Info:

name: E98A66455790741BFC99.mlw
path: /opt/CAPEv2/storage/binaries/b5a1820133b8869bdab1331e2b88bc1f690b0158b27f11bf584e5f46f8554325
crc32: 0B037E24
md5: e98a66455790741bfc9979ee441750a3
sha1: 789a51c82fc99d45ed3964b2bcb129da419eb5eb
sha256: b5a1820133b8869bdab1331e2b88bc1f690b0158b27f11bf584e5f46f8554325
sha512: 27b2158c218deed96e20db99b91695a04425cebdf7e4b4587d8e4111024afc4ef65341ba4df583a19c435cbe917b99a0fd112399a364fde6f2063633e5d342b3
ssdeep: 49152:RIXxl4z2ln/3i6vBZRtGAUp2ojBBWmcRzwWx0au:RCW6Ppbz6FotwKq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15EC50245F94F52E1DAA514B129AA6B374638AE3807136EC3B3E43D75B4310D32E3E369
sha3_384: 494d8a2dc7951e6ff7472b46f5bc38d55f840c47e1581ed4996b9c3bce657a121438b3ff22f1e009312c3a03f31decd4
ep_bytes: e8ad050000e97afeffff3b0d08804c00
timestamp: 2022-02-11 13:50:29

Version Info:

FileDescription:
FileVersion: 1.1.33.10-H005
InternalName:
LegalCopyright:
OriginalFilename:
ProductName:
ProductVersion: 1.1.33.10-H005
Translation: 0x0409 0x04b0

Malware.AI.2169207164 also known as:

BkavW32.AIDetect.malware2
CynetMalicious (score: 100)
McAfeeGenericRXSW-JH!E98A66455790
CylanceUnsafe
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
AvastWin32:MalwareX-gen [Trj]
McAfee-GW-EditionBehavesLike.Win32.Dropper.vc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.e98a66455790741b
Antiy-AVLTrojan/Win32.Wacatac
MicrosoftProgram:Win32/Wacapew.C!ml
Acronissuspicious
VBA32BScope.Trojan.Khalesi
MalwarebytesMalware.AI.2169207164
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:MalwareX-gen [Trj]

How to remove Malware.AI.2169207164?

Malware.AI.2169207164 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment