About “Malware.AI.2492217391” infection

The Malware.AI.2492217391 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2492217391 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• A process attempted to delay the analysis task.
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• .NET file is packed/obfuscated with SmartAssembly
• Authenticode signature is invalid
• Anomalous .NET characteristics
• Collects and encrypts information about the computer likely to send to C2 server
• Installs itself for autorun at Windows startup

How to determine Malware.AI.2492217391?

File Info:
name: 18A9B9B57D88A94094BB.mlw
path: /opt/CAPEv2/storage/binaries/2e334434098e1a8fa54d1dd1967995860e5cbe4c6b652087b7139100fbd98122
crc32: 198C1FE6
md5: 18a9b9b57d88a94094bbbf2b8afb1f71
sha1: b5e2d40e9248262d4b9a9428f9281a89c4bf9b1f
sha256: 2e334434098e1a8fa54d1dd1967995860e5cbe4c6b652087b7139100fbd98122
sha512: a6ddba78c5b867c064c941f7df8fe040042f60a420dfcdba3a986c4a76ccbcc146b59f2c51e357015cb22a206dd6d852387c0d465dcbcc4953c08209c1c18a0d
ssdeep: 12288:iEmXmBBDNrhgdor7qZBK5ApICUstyCK8:tm2HmofqTWAFUsty
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T198A48C5A739D1E11C3AE0B76CAE361740755CC1DC9CAE30F64C53CE4BA6438EA9A624F
sha3_384: 84a895581563dda93f2bafe5b24cc6ab74b158b482cc30601d32f897c4b2fdaa11598125b4478dca16d9d0622d036091
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-01-26 22:06:31

Version Info:
Translation: 0x0409 0x04e4
FileDescription: SplitCam Stream Splitter
FileVersion: 7.5.3.2
InternalName: SplitCam.exe
LegalCopyright: Copyright 2003-2016 (c) SplitCam Co.  All rights reserved.
OriginalFilename: SplitCam.exe
ProductVersion: 7.5.3.2
Assembly Version: 0.0.0.0
CompanyName: SplitCam Co.
ProductName: SplitCam

Malware.AI.2492217391 also known as:

How to remove Malware.AI.2492217391?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.