Malware.AI.3274104402 (file analysis)

The Malware.AI.3274104402 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3274104402 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Malware.AI.3274104402?

File Info:
name: 28E8AEC553A408CCEEFF.mlw
path: /opt/CAPEv2/storage/binaries/ec42fba0b0a6df3a47c21abbd15348faf74e794a80e0cd63bc18101889b90a07
crc32: 4DCD6130
md5: 28e8aec553a408cceeff6804bc5c2593
sha1: c8e6c28ffe20373fa9bb55b3f0d069439334126a
sha256: ec42fba0b0a6df3a47c21abbd15348faf74e794a80e0cd63bc18101889b90a07
sha512: 77679bf9d1cabe4402c44cc2ab65d8682c12419798ef5ac1299b879b5e8b14ab4601d205f7a782d793ee2434a15d87496134ce8aaf9163848c65dfa304f0050c
ssdeep: 3072:dVMHGrnARGG3pJpFZSPcWYWIfkI+u90YAEU8KO/eX6IXic:ruUARB5tGYJ+w0gU/O/eXzz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19B043D177298CB01DAB428B5C0EFA43517E0ADCB2B33E6993F4D72592811363DE95B8D
sha3_384: 73795bbe058c81d4352190711c7ca955ef59e7c60f4170389c953442c68053c34234cadea92064298d49dc2fb2ff651b
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-12-16 19:22:18

Version Info:
Translation: 0x0000 0x04b0
Comments: Microsoft Office Update -Microsoft.com | Microsoft® | Site Oficial‎
CompanyName: Microsoft Office Update -Microsoft.com | Microsoft® | Site Oficial‎
FileDescription: Microsoft Office Update -Microsoft.com | Microsoft® | Site Oficial‎
FileVersion: 1231.12312.1.1
InternalName: RevengeFUD0000000.exe
LegalCopyright: Microsoft Office Update -Microsoft.com | Microsoft® | Site Oficial‎
LegalTrademarks: Microsoft Office Update -Microsoft.com | Microsoft® | Site Oficial‎
OriginalFilename: RevengeFUD0000000.exe
ProductName: Microsoft Office Update -Microsoft.com | Microsoft® | Site Oficial‎
ProductVersion: 1231.12312.1.1
Assembly Version: 2312.23123.1.1

Malware.AI.3274104402 also known as:

How to remove Malware.AI.3274104402?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.