About “Malware.AI.22635475” infection

The Malware.AI.22635475 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.22635475 virus can do?

Dynamic (imported) function loading detected
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Malware.AI.22635475?


File Info:
name: 88989E3B7C8DE0ED1379.mlw
path: /opt/CAPEv2/storage/binaries/a3a1eb52d932615a6332b5c6e185dcc24e3b6ee2dcfc59fe756ec5254579ad3f
crc32: 432F5EC5
md5: 88989e3b7c8de0ed13799f7fc05d958e
sha1: e9b66416ccc775605e4a011ad70c2e13f90fd8f5
sha256: a3a1eb52d932615a6332b5c6e185dcc24e3b6ee2dcfc59fe756ec5254579ad3f
sha512: 28d74147fd4d7b35b795d1afd4ab0cd880d431fea016a1450135524ae54421d36e7e40b6c5979db54a65f118a36f17e3f3fdd2544321bb6ea7e7e68bc58df0ff
ssdeep: 3072:gDlQWhTmANXX9Pgmmr2Pek9WDm93IuOwMtdA3/HLalLLc:gDlQWhlRiDmTMYPHGi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T177C4546470DBBC87EB9BE13E147DF872A21C09F3096901493964D70B8162B837A9D77E
sha3_384: 89505568f2a659b080ba665c799a632a06ec274b2d41ffa9872ec371407ab31cd9fffde3a846ceb34667e332407a356e
ep_bytes: 558bec6aff6830534000681a2f400064
timestamp: 2022-06-30 16:32:45

Version Info:
CompanyName: 
FileDescription: MyShell5 Microsoft 基础类应用程序
FileVersion: 1, 0, 0, 1
InternalName: MyShell5
LegalCopyright: 版权所有 (C) 2022
LegalTrademarks: 
OriginalFilename: MyShell5.EXE
ProductName: MyShell5 应用程序
ProductVersion: 1, 0, 0, 1
Translation: 0x0804 0x04b0

Malware.AI.22635475 also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Ser.Ursu.18617
FireEye	Generic.mg.88989e3b7c8de0ed
Cylance	Unsafe
VIPRE	Gen:Variant.Ser.Ursu.18617
BitDefender	Gen:Variant.Ser.Ursu.18617
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.AJWU
APEX	Malicious
Kaspersky	UDS:Trojan.Win32.Hesv.gen
Rising	Trojan.Generic@AI.80 (RDMK:cmRtazpHJFbcV5O3+caod7CqTPru)
Ad-Aware	Gen:Variant.Ser.Ursu.18617
Emsisoft	Gen:Variant.Ser.Ursu.18617 (B)
Trapmine	malicious.high.ml.score
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Ser.Ursu.18617
ALYac	Gen:Variant.Ser.Ursu.18617
MAX	malware (ai score=86)
Malwarebytes	Malware.AI.22635475
BitDefenderTheta	Gen:NN.ZexaF.34742.Jq0@a4qf0Kbb
AVG	TrojanX-gen [Trj]
Avast	TrojanX-gen [Trj]

How to remove Malware.AI.22635475?

Malware.AI.22635475 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X