Malware

What is “Malware.AI.2680510702”?

Malware Removal

The Malware.AI.2680510702 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2680510702 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with Enigma
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Harvests cookies for information gathering
  • Binary compilation timestomping detected

How to determine Malware.AI.2680510702?


File Info:

name: 5402D0ABA81EA758C6CA.mlw
path: /opt/CAPEv2/storage/binaries/3afaf9e3862112b251f106ae450e48765b0056f05fed4258d251e31b6019922c
crc32: 6BFDA20B
md5: 5402d0aba81ea758c6cac13bfd1ddb2a
sha1: 1b2e7f82011dc7ce5e6357dc4b1bcd3ad11824bc
sha256: 3afaf9e3862112b251f106ae450e48765b0056f05fed4258d251e31b6019922c
sha512: 38912800e4305bdb29e4de2c7eecfa7dc28f46cb94d7889f769e096df4e794101e8f760883d76b564295092e63204113d7d1dd092b4ae33b2eae758097c98562
ssdeep: 24576:Dyb7zt0RTQvrM9iVySu+uGCYpNMWmAY80sBui9:DyztckraiwyuGrh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T143350135B2C48D37C17B1E7CDE25811405BEF7262929ED4E6FD4A88C5F363821A2D2A7
sha3_384: 90ff12f39ee81a2cade1cfb379b54ea76e3b0465bd392e0e92d945af7c5b24749d0b07c36e85a9e6432df62a766425b4
ep_bytes: ff25002040000000000000000000
timestamp: 2080-06-26 23:34:05

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName: Tryon Games
FileDescription: LauncherUnited
FileVersion: 1.2.6.18
InternalName: LauncherUnited.exe
LegalCopyright: Copyright © S4Archivos 2021-2022
LegalTrademarks: Tryon Games
OriginalFilename: LauncherUnited.exe
ProductName: LauncherUnited
ProductVersion: 1.2.6.18
Assembly Version: 1.2.6.18

Malware.AI.2680510702 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Fragtor.171379
FireEyeGeneric.mg.5402d0aba81ea758
McAfeeArtemis!5402D0ABA81E
MalwarebytesMalware.AI.2680510702
VIPREGen:Variant.Fragtor.171379
SangforTrojan.Win32.Save.a
Cybereasonmalicious.ba81ea
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
APEXMalicious
CynetMalicious (score: 100)
BitDefenderGen:Variant.Fragtor.171379
AvastWin32:Malware-gen
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
EmsisoftGen:Variant.Fragtor.171379 (B)
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=85)
Antiy-AVLTrojan/Win32.SGeneric
ArcabitTrojan.Fragtor.D29D73
GDataWin32.Trojan.PSE.1IS7RIQ
GoogleDetected
AhnLab-V3Malware/Gen.RL_Reputation.R370445
BitDefenderThetaGen:NN.ZexaF.36196.ev0@aOF0ajp
ALYacGen:Variant.Fragtor.171379
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H09AC23
RisingTrojan.Generic@AI.100 (RDML:eg29KAe2qBdJk/bH5SanhQ)
IkarusTrojan.Agent
MaxSecureTrojan.Malware.196878157.susgen
FortinetPossibleThreat.PALLAS.H
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (D)

How to remove Malware.AI.2680510702?

Malware.AI.2680510702 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment