What is “Malware.AI.2593021878”?

The Malware.AI.2593021878 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.2593021878 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Malware.AI.2593021878?


File Info:
name: AAF0C7B5EEAE55245D0D.mlw
path: /opt/CAPEv2/storage/binaries/94b3feb927e0c764be471bd0fd2bd9e83d0396e2427d63ec189ff3a1740da181
crc32: CE623FEF
md5: aaf0c7b5eeae55245d0d5346ab8aa39c
sha1: d9342f4a1ab9d0b40721a1bc07784a925e473d61
sha256: 94b3feb927e0c764be471bd0fd2bd9e83d0396e2427d63ec189ff3a1740da181
sha512: 7a5afeea03aa95f05bd48de31a9423c63ac156b85d4e5b6848a63e9e454b29d1416166cac45ceb552d09ad335d5d001816d538007cecb38f406d1db11597b130
ssdeep: 384:VUO5mjHoDplwwUDwHRyeTB14Sd5BBUQl22rwxTSa:aO5mLotlvyeTLDd5BBEewl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T102D229CBBA0815B3C0661B760496661746FBEF3442BF970D1B8CD95B7C661B8E41C387
sha3_384: 3fc73a467753e19c66427bbe669661a4916f6384880f1a182395fe80dbf4341d997f60d2e2fd1d030c34d2c5a57ee8be
ep_bytes: 60be15e040008dbeeb2fffff5783cdff
timestamp: 2007-01-22 21:51:22

Version Info:
0: [No Data]

Malware.AI.2593021878 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Generic.Malware.SF!dld!.248F2D4F
FireEye	Generic.mg.aaf0c7b5eeae5524
ALYac	Generic.Malware.SF!dld!.248F2D4F
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.5eeae5
BitDefenderTheta	AI:Packer.1B52E5EF1D
Cyren	W32/Agent.EPB.gen!Eldorado
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/TrojanDownloader.Agent.NIV
ClamAV	Win.Downloader.2666-1
BitDefender	Generic.Malware.SF!dld!.248F2D4F
APEX	Malicious
Ad-Aware	Generic.Malware.SF!dld!.248F2D4F
Emsisoft	Generic.Malware.SF!dld!.248F2D4F (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
F-Secure	Trojan.TR/Crypt.ULPM.Gen
DrWeb	Trojan.DownLoader.19447
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan-Dropper.Agent
GData	Generic.Malware.SF!dld!.248F2D4F
Jiangmin	Trojan.Multi.jtu
Avira	TR/Crypt.ULPM.Gen
MAX	malware (ai score=85)
Arcabit	Generic.Malware.SF!dld!.248F2D4F
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.C58510
McAfee	GenericRXAA-FA!AAF0C7B5EEAE
VBA32	BScope.TrojanDownloader.Agent
Malwarebytes	Malware.AI.2593021878
Avast	Win32:DropperX-gen [Drp]
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Malware.AI.2593021878?

Malware.AI.2593021878 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X