Malware.AI.2442845439 (file analysis)

The Malware.AI.2442845439 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2442845439 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Malware.AI.2442845439?


File Info:
crc32: 804076B8
md5: daf7a7df51642ed9ddb8af78bb4e8d43
name: DAF7A7DF51642ED9DDB8AF78BB4E8D43.mlw
sha1: fcae04a583b8ad93e2f2df826d4cd4744901ebd7
sha256: 9e8951753981c07a3fc2f2d0228b0586d3532c48ddea6f37cbaf0501cb38b8d5
sha512: f8b0f08ab6be73f0e551f41c8d4a91e37078991e551eab918d3d1904f7f0caf07c1fed2c811e21a40646780ff690bd44bde01ed62d8b2215c99d2a0d468d781b
ssdeep: 6144:4tLfr/ikzyKm/4XeIZKGX/g8mS75Al3sMOFylKKnVuhu1V6aBt0Y2xU5Hy3y+VSW:yLfzhuSOIZKkZ5Al3sMOMlzft4egM9g
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: XBinary x7248x6743x6240x6709
FileVersion: 1.0.0.0
CompanyName: XBinary
Comments: Unityx6388x6743x6587x4ef6x5207x6362x5668
ProductName: Unityx6388x6743x6587x4ef6x5207x6362x5668
ProductVersion: 1.0.0.0
FileDescription: Unityx6388x6743x6587x4ef6x5207x6362x5668
Translation: 0x0804 0x04b0

Malware.AI.2442845439 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 005328801 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/BScope.db480e11
K7GW	Trojan ( 005328801 )
Cybereason	malicious.583b8a
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEX	Malicious
Avast	Win32:Malware-gen
NANO-Antivirus	Trojan.Win32.Graftor.fgpcan
Sophos	Mal/Generic-S
Comodo	Application.Win32.GameHack.BA@6l2r2h
BitDefenderTheta	Gen:NN.ZexaF.34170.Tq0@aGjMg@jb
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PEM21
McAfee-GW-Edition	BehavesLike.Win32.Emotet.bh
FireEye	Generic.mg.daf7a7df51642ed9
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_69%
Antiy-AVL	Trojan/Generic.ASMalwS.27AE69A
Microsoft	Trojan:Win32/Occamy.C9E
McAfee	Trojan-FPEY!DAF7A7DF5164
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Malware.AI.2442845439
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PEM21
Rising	Trojan.Kryptik!1.B3E8 (CLASSIC)
Fortinet	W32/Generic_PUA_PG.FPEY!tr
AVG	Win32:Malware-gen

How to remove Malware.AI.2442845439?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.2442845439 (file analysis)