Malware

Malware.AI.3625162949 removal

Malware Removal

The Malware.AI.3625162949 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3625162949 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Malware.AI.3625162949?


File Info:

name: B7422EB133CE33106FD7.mlw
path: /opt/CAPEv2/storage/binaries/e5cd5b0bf21b72c2b562ae49c3d3c058cbb935bbfdc96bc8d463c8bd3b019ed0
crc32: 54D4BEF7
md5: b7422eb133ce33106fd710e45d39db79
sha1: 7f03ed59f1d9770dcaf729234e9f80971715a750
sha256: e5cd5b0bf21b72c2b562ae49c3d3c058cbb935bbfdc96bc8d463c8bd3b019ed0
sha512: 876a04a7b9d0403a2861a29dc3934c4c780436848a5aaf4cb1b80a546b3692280aab93f4efaab77dca7ead773d6df435f5063509c6257992727daba475a3bd5d
ssdeep: 384:XrdS72+KBwejwV5wKXr8BejVW3obP6H6wPhN96lh6iBhD215M1k:UHKBfwbwurqIY42rhrkTBhDle
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1C503E711B680C037F8EA01BFDAFE4CB6492C9D681F6E91D362D315E92B505D7243678B
sha3_384: 523abf5ddea1c95bd3691a3786eba5edcf2a5a34d85d717088db970d0b6d2e0a87a16e982b356c19e9903a3e30a95f59
ep_bytes: e9080f0000e9663e0000e93e390000e9
timestamp: 2022-11-28 19:38:11

Version Info:

0: [No Data]

Malware.AI.3625162949 also known as:

LionicTrojan.Win32.Generic.4!c
FireEyeGeneric.mg.b7422eb133ce3310
McAfeeRDN/Generic.dx
AlibabaTrojan:Win32/Fugrafa.1ceb0cb5
CyrenW32/Fugrafa.G.gen!Eldorado
Elasticmalicious (high confidence)
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
McAfee-GW-EditionBehavesLike.Win32.Generic.nt
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Suspicious PE
Antiy-AVLTrojan/Win32.PossibleThreat
GoogleDetected
VBA32Trojan.Sabsik.FL
MalwarebytesMalware.AI.3625162949
TrendMicro-HouseCallTROJ_GEN.R002H06AU23
RisingTrojan.Generic@AI.100 (RDML:ziyVzX2bchBkqwQaxmDn5Q)
IkarusTrojan.Agent
FortinetW32/PossibleThreat
DeepInstinctMALICIOUS

How to remove Malware.AI.3625162949?

Malware.AI.3625162949 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment