Malware.AI.3044593709 (file analysis)

The Malware.AI.3044593709 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3044593709 virus can do?

• Uses Windows utilities for basic functionality
• HTTPS urls from behavior.
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Attempts to identify installed AV products by installation directory
• Attempts to modify proxy settings
• Appears to use command line obfuscation
• Deletes executed files from disk
• Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.3044593709?

File Info:
name: EC5E0AE1E895647A4C5A.mlw
path: /opt/CAPEv2/storage/binaries/a53a78e622de9da48009a0b55f9108adf220356bd572001ea981d32451b1e090
crc32: 3D821330
md5: ec5e0ae1e895647a4c5a51cafce3a5d3
sha1: 80fda4f2bdb83f8b1ac6b09a5f9a5af30ec5fc80
sha256: a53a78e622de9da48009a0b55f9108adf220356bd572001ea981d32451b1e090
sha512: 2695346bf7be441be13d80bb600488311c3f6f91a8690321e2c01b87e288bb73c28f692b487848ef9cf7a059577aa65dc7c7a1817cfed6c2f73e58b97030d1f6
ssdeep: 3072:KXy+bnr+O1Z5GWp1icKAArDZz4N9GhbkrNEk1GnOvKffKT2kZTxKmBGbwuejom:KXy+bnr+Op0yN90QEbqE0ue8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DB34D003ABD85473D9B527B018FB03C31A36BDA19934876B3785A84F1DB26C4A97173B
sha3_384: 1cc9004f748ac753c32f04458df23c40f54c7ae7993aa1e526e5509e65d047b93068d68eaef3d0e4d7b20d8fca59fe9d
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor                                           
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract                
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE            .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0409 0x04b0

Malware.AI.3044593709 also known as:

How to remove Malware.AI.3044593709?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.