Malware

What is “Malware.AI.2725732191”?

Malware Removal

The Malware.AI.2725732191 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2725732191 virus can do?

  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.2725732191?


File Info:

name: 89C05238F15770D1A286.mlw
path: /opt/CAPEv2/storage/binaries/fb7f0c4ccef2ad93d01a2fa2b0ad2311bd9008fec5a20512d27212060ec9142e
crc32: A09DCD9D
md5: 89c05238f15770d1a2864bdcbeb23d17
sha1: 42fb4949b315326ede58139a2571daa72788d2bc
sha256: fb7f0c4ccef2ad93d01a2fa2b0ad2311bd9008fec5a20512d27212060ec9142e
sha512: 3ea0de4321ff0452366ae51d3fd75e69c3e7fafab1e15db30f44142cedef32bb3516a479b06c3c03dd5419bfd8e7c4c96ac09a2630447cf223e3b2c9e9488a08
ssdeep: 24576:d8StziJYdDXVav9MkyE6Ehg7mM+M6RkMkIM7gE6Eh67gA:dxzCv9M/0g7mM+M6RkMkIM7I067gA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T169958D01B75180B7D1612470892BBB580264BFB42F23D2ABFE64760EFD717C25537ABA
sha3_384: 2f9b951ff41255faea49e7c3ebab20a6f7a3528cd867d81b6d529f6c1b71bd2b3d367018c3b38543c720dc538dad1934
ep_bytes: e8ad8d0000e97ffeffff558bec8b4514
timestamp: 2015-12-11 23:46:12

Version Info:

CompanyName: Microsoft Corporation
FileDescription: appvlp
InternalName: appvlp
LegalCopyright: Copyright © 2014 Microsoft Corporation
LegalTrademarks: Microsoft® is a registered trademark of Microsoft Corporation.
OriginalFilename: appvlp.exe
ProductName: Microsoft Application Virtualization (App-V)
FileVersion: 5.0.10334.0
ProductVersion: 5.0.10334.0
PrivateBuild: 50sp3Servicing (by sftbuild on MBAMR02BLD01)
Translation: 0x0409 0x04b0

Malware.AI.2725732191 also known as:

Elasticmalicious (high confidence)
FireEyeGeneric.mg.89c05238f15770d1
CyrenW32/Mikey.BH.gen!Eldorado
ClamAVWin.Trojan.Generic-9853696-0
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.Trojan.th
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1201262
GDataWin32.Trojan.PSE.136NMWS
CynetMalicious (score: 100)
McAfeeArtemis!89C05238F157
VBA32Trojan.Wacatac
MalwarebytesMalware.AI.2725732191
IkarusTrojan.Agent
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.A60C!tr

How to remove Malware.AI.2725732191?

Malware.AI.2725732191 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment