What is “Malware.AI.266030362”?

The Malware.AI.266030362 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.266030362 virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.266030362?


File Info:
name: 47FB5E0FF4DEFFEADF04.mlw
path: /opt/CAPEv2/storage/binaries/e0897224ecc34aa842ee93db69a1e41641854051411c23c7a95485bd635e3a52
crc32: 4AE3EBE3
md5: 47fb5e0ff4deffeadf0441a79ef8c50e
sha1: b71745e4ca24ffeda4b37041cad95a53323eea97
sha256: e0897224ecc34aa842ee93db69a1e41641854051411c23c7a95485bd635e3a52
sha512: b95c704a758f0faa79292c06308fe9dca902edbe70906604f7949d76553743e23bc7f6492a142a786f36cb0d7d5e069d38eb1debfe1320d4ac9f159dfeb8e589
ssdeep: 98304:5rHQ6bAHA1GzkDo8D87U7CDnSp97rew2c5HND0NxuAZ:dwwAHA1G6N17vew2c5H5wxus
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11B46BE167390863FC06A36349C638AD566F5FF122A359FAF364878684E773801EE1397
sha3_384: 25f1171d85cdbc653d679061dc5f04da459df8eca47452eab5f7d88ea02acdd6499e7dac146ca0beb3760c712511d70f
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-09-09 02:32:00

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: SandeLLo
FileDescription: SandeLLo CHECKER
FileVersion: 1.7.2.7
InternalName: SandeLLo CHECKER.exe
LegalCopyright: Разрабочик - SemKrill © 2022
LegalTrademarks: 
OriginalFilename: SandeLLo CHECKER.exe
ProductName: SandeLLo CHECKER
ProductVersion: 1.7.2.7
Assembly Version: 1.7.2.7

Malware.AI.266030362 also known as:

Lionic	Trojan.Win32.Heracles.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.MSILHeracles.41769
FireEye	Gen:Variant.MSILHeracles.41769
McAfee	Artemis!47FB5E0FF4DE
VIPRE	Gen:Variant.MSILHeracles.41769
Sangfor	Trojan.Win32.Agent.V3cx
CrowdStrike	win/malicious_confidence_70% (W)
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H09I922
Kaspersky	HEUR:Trojan-PSW.MSIL.Stealer.gen
BitDefender	Gen:Variant.MSILHeracles.41769
Avast	Win32:PWSX-gen [Trj]
Ad-Aware	Gen:Variant.MSILHeracles.41769
McAfee-GW-Edition	Artemis
SentinelOne	Static AI – Malicious PE
Emsisoft	Gen:Variant.MSILHeracles.41769 (B)
APEX	Malicious
GData	Gen:Variant.MSILHeracles.41769
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Gen:Variant.MSILHeracles.41769
Malwarebytes	Malware.AI.266030362
Rising	PUF.Pack-Enigma!1.BA33 (CLASSIC)
Fortinet	PossibleThreat
AVG	Win32:PWSX-gen [Trj]

How to remove Malware.AI.266030362?

Malware.AI.266030362 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X