Malware.AI.2971440956 malicious file

The Malware.AI.2971440956 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.2971440956 virus can do?

Executable code extraction
Creates RWX memory
A process created a hidden window
Installs a browser addon or extension
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Detects Sandboxie through the presence of a library
Attempts to repeatedly call a single API many times in order to delay analysis time
Creates a hidden or system file
Network activity detected but not expressed in API logs
Attempts to modify browser security settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

edgedl.me.gvt1.com

How to determine Malware.AI.2971440956?


File Info:
crc32: B005B32E
md5: 8bb9a814d6fa9cd086591bd80fe20f01
name: 8BB9A814D6FA9CD086591BD80FE20F01.mlw
sha1: 9db25195ce96576b05695b4839558b31f97e529b
sha256: 147bd6637a1209b4a8342d5009c39be5a8f6ac5c7877a7c676470f12c9662c09
sha512: 2208c42ab137689cf0efd93f6a5e34bac09db00e3ec08d01dd08c1f8555c8e6fd049be82d57dd2c2a2ed0e2bbba21d17f15225e54fd592964cbdc80833737c7e
ssdeep: 24576:+U6OuTadht9DJ6xzaZHx6QUpJtRYj2aqZCYcssjRxPH1SoWB:+UVN3t9V6AF0QM/2qwnl7S
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.2.5.0
Comments: hjbmgjjlkhljguiy
ProductName: x4e0bx8f7dx542fx52a8x9879
ProductVersion: 1.2.5.0
FileDescription: gfcvhjknlkjhkjyhiu
Translation: 0x0804 0x04b0

Malware.AI.2971440956 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Adware ( 004b942f1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	Adware ( 004b942f1 )
Cybereason	malicious.5ce965
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/FlyStudio.Packed.AE potentially unwanted
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34684.dz0@aCK5dSbb
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.8bb9a814d6fa9cd0
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Acronis	suspicious
VBA32	BScope.Trojan.Downloader
Malwarebytes	Malware.AI.2971440956
Rising	Malware.Heuristic!ET#97% (RDMK:cmRtazpWy0dMfitwwN3JutKPvHkd)
AVG	Win32:Evo-gen [Susp]

How to remove Malware.AI.2971440956?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Malware.AI.2971440956 malicious file