Malware

Malware.AI.239959356 malicious file

Malware Removal

The Malware.AI.239959356 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.239959356 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Authenticode signature is invalid
  • CAPE detected the VMProtectStub malware family
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.239959356?


File Info:

name: 2EE90F6B1219BB0B61F2.mlw
path: /opt/CAPEv2/storage/binaries/d9d55ece144d72a7491e63d85cfbdfeb38c7f7c46ec7a2b9d21ceb9d0bcb2455
crc32: F300D3AF
md5: 2ee90f6b1219bb0b61f2cbe0d555e914
sha1: ae1f9e298fd0bd81133b2a6235b8c916ac9d738c
sha256: d9d55ece144d72a7491e63d85cfbdfeb38c7f7c46ec7a2b9d21ceb9d0bcb2455
sha512: 8ff703d00c6ccbeae644a2d00dc3f776dcf9cb0d6a96a9692e7b00c68027cf67e90d26b17692127054eafbcefddf7aa2a48c27fe9f2528f0d7598f011feb9f47
ssdeep: 49152:3QiEUq5YUcWWyAAPaTubNUJ925CIoe2jGveTfyK+GevXM2y/AW9Ss1oge6PO1zYw:hpszay5aTGNUr2cIoe2TJFevXM34W4s/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C8D523312A8614A6D3A9577C3E48FB4498EDDE7592E4913FE4A035F808338936ADF11F
sha3_384: 6b12974e644bd6356a1f85ac2e93d2f748e525cdf3b2a0c8c7b0536112f619907cfe8992282ed4119a8e7f923060578a
ep_bytes: e9cfcffdfff2a60880287f02da533ba6
timestamp: 2023-05-18 00:54:50

Version Info:

0: [No Data]

Malware.AI.239959356 also known as:

BkavW32.AIDetectMalware
MalwarebytesMalware.AI.239959356
Cybereasonmalicious.98fd0b
BitDefenderThetaGen:NN.ZexaF.36196.OEY@aqrIZOmb
APEXMalicious
Trapminemalicious.high.ml.score
SophosGeneric ML PUA (PUA)
MicrosoftTrojan:Win32/Wacatac.B!ml

How to remove Malware.AI.239959356?

Malware.AI.239959356 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment