Should I remove “Malware.AI.3658545493”?

The Malware.AI.3658545493 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3658545493 virus can do?

• A file was accessed within the Public folder.
• Uses Windows utilities for basic functionality
• HTTPS urls from behavior.
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• CAPE detected the RedLine malware family
• Attempts to identify installed AV products by installation directory
• Checks the presence of disk drives in the registry, possibly for anti-virtualization
• Attempts to modify proxy settings
• Appears to use command line obfuscation
• Deletes executed files from disk
• Uses suspicious command line tools or Windows utilities
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3658545493?

File Info:
name: FF14BC4ACC1FC81143CE.mlw
path: /opt/CAPEv2/storage/binaries/3a65de2c1fb0d74c093eaa6c6f6c3ae0782e2864175815aa6c3c5726f9eb638d
crc32: 17901BD3
md5: ff14bc4acc1fc81143ce84b4e1a3cd71
sha1: 10e49e1af37d10e94c5c54a2bfa9762213886588
sha256: 3a65de2c1fb0d74c093eaa6c6f6c3ae0782e2864175815aa6c3c5726f9eb638d
sha512: 8c41168a7b281722689b2dd62aad3c8ed92618c736e5bb48260fdbcb0b4123943c943eef61d09734a45f4a3424a7a3f2a4fa1604bee53b6e045e1cd044783356
ssdeep: 12288:TMrjy90iHTMF9iDK1BvcHaknsrFDJcuVy3eYV:Ay9TMFwKYakYF9cuV9YV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T173B41207A7E98032DDB12BB058F702831A3ABDA2D938925B37549C4E0C73AD4B57577B
sha3_384: 4b1f7710ef16a9c99c6205939706d25a72746f19e508fc0606d24dde0e4c4b6a6813d48f21a0744646f21d16d9420e29
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor                                           
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract                
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE            .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0409 0x04b0

Malware.AI.3658545493 also known as:

How to remove Malware.AI.3658545493?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.