Malware

Malware.AI.2561283380 (file analysis)

Malware Removal

The Malware.AI.2561283380 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2561283380 virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • Reads data out of its own binary image
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

www.cheathappens.com
apps.identrust.com
crl.identrust.com
x1.c.lencr.org

How to determine Malware.AI.2561283380?


File Info:

crc32: D5C47A59
md5: 729fff2c85428dc5d46c5463f808c7df
name: 729FFF2C85428DC5D46C5463F808C7DF.mlw
sha1: 507af01a77e6297c7d66eee26894c021620ae588
sha256: 23a0b2ee9dbde4264899e2aaf6f8cc1329b9b67e01538787a40ec0734e8aa467
sha512: 22b9ec19c4ba97218a72e60b2fca2ddf6b076122a40660711f2ee0225e7877b88f75d6819199afcad718f67b4f3048ac5f04373529a77f0db5792657d1912751
ssdeep: 49152:44YNTKQ4h+01810d97PvL912JTDxxaOEJBV1Ls2wB8JBV1Ls2wBC:44Y6ho1OnevhltC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.2561283380 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusUnwanted-Program ( 0050cb4e1 )
LionicRiskware.Win32.Generic.1!c
Elasticmalicious (high confidence)
ClamAVWin.Malware.Gamehack-6847638-0
CAT-QuickHealTrojan.GenericPMF.S17596037
MalwarebytesMalware.AI.2561283380
ZillyaTrojan.GameHack.Win64.159
CrowdStrikewin/malicious_confidence_100% (D)
K7GWUnwanted-Program ( 0050cb4e1 )
CyrenW32/GameHack.AH.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GameHack.EVN potentially unsafe
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
SophosGeneric PUA FA (PUA)
BitDefenderThetaGen:NN.ZexaF.34294.dwX@a4Tqtwli
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
FireEyeGeneric.mg.729fff2c85428dc5
EmsisoftApplication.GameHack (A)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1145322
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.247BD91
GDataWin32.Application.PSE.11423CR
AhnLab-V3PUP/Win32.Helper.R240933
Acronissuspicious
McAfeeGenericRXAA-AA!729FFF2C8542
MAXmalware (ai score=96)
VBA32Trojan.Downloader
RisingPUF.GameHack!1.B348 (CLASSIC)
YandexTrojan.GenAsa!bJnf0WOlY7w
IkarusTrojan.Win32.Occamy
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GameHack.A7832C08!tr
PandaTrj/GdSda.A

How to remove Malware.AI.2561283380?

Malware.AI.2561283380 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment