What is “Malware.AI.3139648491”?

The Malware.AI.3139648491 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3139648491 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.3139648491?


File Info:
name: 2BA49970CB9E0C3F2311.mlw
path: /opt/CAPEv2/storage/binaries/0b7de9f032adebcd949ede64bcc423f425cd1fd38b372b300e01e12cea1f97ca
crc32: C3DC71AD
md5: 2ba49970cb9e0c3f2311df3ac43f36da
sha1: 16b6478bc1e77a9a720919a60f30698ae4a42f81
sha256: 0b7de9f032adebcd949ede64bcc423f425cd1fd38b372b300e01e12cea1f97ca
sha512: 19c10e02c27aae581e107738ab838fd7f827627c7fb988300f12c4956fdbd220a590747cfe39ba1a8ff1573166bebae7ab15cf8ed22494cb96ed41e91907db20
ssdeep: 384:agpiEwKOAYzlI4GS1dxBm/rdAgJB2OxI+VbPeuaBU3losjuzZ6UwYRGZqS7AWZm7:liEw1zKugJ1PP3lLuzZPKqjWIFDp4m
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T140031949BE254CF7EA52533E94E7C7762B3DF1814A235BB3BB30B7344B136922099246
sha3_384: 8516610058c57d8cceee912bee9823b6f3dba5fce723e348346aa51932298cf7f604e934e593c6f6bc4389ff1bc7c845
ep_bytes: 83ec1cc7042401000000ff1590814000
timestamp: 2022-03-11 08:35:14

Version Info:
0: [No Data]

Malware.AI.3139648491 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (moderate confidence)
Skyhigh	RDN/Generic.dx
McAfee	RDN/Generic.dx
Malwarebytes	Malware.AI.3139648491
Sangfor	Trojan.Win32.Agent.V7vq
Cynet	Malicious (score: 100)
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Varist	W32/Presenoker.T.gen!Eldorado
Antiy-AVL	Trojan/Win32.Agent
ViRobot	Trojan.Win.Z.Possiblethreat.40766.MG
GData	Win32.Trojan.PSE.119QQ95
Google	Detected
AhnLab-V3	Malware/Win.Generic.C5071400
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H06K423
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS

How to remove Malware.AI.3139648491?

Malware.AI.3139648491 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X