Should I remove “Malware.AI.352373389”?

The Malware.AI.352373389 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.352373389 virus can do?

• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Executable file is packed/obfuscated with MPRESS
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Binary file triggered YARA rule
• Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.352373389?

File Info:
name: F344A17EF448811288CF.mlw
path: /opt/CAPEv2/storage/binaries/0669801afb3a59cbfab1ff3fbf8401cb74b479a78c12e79080809d6885446eba
crc32: A5BDCE72
md5: f344a17ef448811288cf239e2c0d277d
sha1: 43678481f8fd837509ead2760bea39756035d4a4
sha256: 0669801afb3a59cbfab1ff3fbf8401cb74b479a78c12e79080809d6885446eba
sha512: e8fc8b966a1391503944204feccdc7b9f843b77441338187992adeb8b705b59bd15f3f70b1cc5a4fc95ee7335bd80313db79fb433e1d22475907ddca71bdea9a
ssdeep: 12288:6iGBDs0gVm7+4sz4Dgyx1dBKEZheqEd5nP+pF68XKb:6iGC0gVm7++dKWc5WKZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B8942352EA4CE781C35846B506C97C1C41309A1B12E5AFF73DCD32BB7E66E844D097B6
sha3_384: ae6b6e8f9f190c857b7ede0325503352de290c1535989ee0d261513a8a1fb62943570bf2bd2338b051ca9611931abbc4
ep_bytes: 60e80000000058055a0b00008b3003f0
timestamp: 2023-04-22 09:09:26

Version Info:
0: [No Data]

Malware.AI.352373389 also known as:

How to remove Malware.AI.352373389?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.