Malware

Malware.AI.3691972929 (file analysis)

Malware Removal

The Malware.AI.3691972929 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3691972929 virus can do?

  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Binary compilation timestomping detected

How to determine Malware.AI.3691972929?


File Info:

name: 51BF48CECC1A1C318F4B.mlw
path: /opt/CAPEv2/storage/binaries/9f24b2c3b6f766003217e0580856a41c945d079448ec17624893f591184efd35
crc32: FE691956
md5: 51bf48cecc1a1c318f4b457df6e11d81
sha1: f0050d67c1ff669c95fd83f19c4beadfcc04afff
sha256: 9f24b2c3b6f766003217e0580856a41c945d079448ec17624893f591184efd35
sha512: 509c6e2eb2d34ec39a36367cbf1487ebcd9ddddf0bb92ecb662c3a6c874b1641908bd2db2066dfbbb6e5a62e01e64ce5555a81afeb16ac932064cd113a9a1eaa
ssdeep: 3072:rovMUVadtq7v0IKZnXA+MoX5tpqx3MZZCHeCkgyh5WOSOn7YdfrRv:1tq7v0IKm+MoX5t3ZZwTvErnMzR
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1FAD3D499B248AF23C53C55B180E7346023F189AF2673E3D57ECD25DD0E47B029A2A65F
sha3_384: feeedc782688c7665a7cceb3aa07d038f5ccc3c325dec988b0253ce4202742966cdfe8717dbda489c8f94195e80f144d
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2066-04-15 17:11:11

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: osmarket
FileVersion: 1.0.0.0
InternalName: osmarket.exe
LegalCopyright: Copyright 2021 ⓒ OSMARKET Corp.
LegalTrademarks:
OriginalFilename: osmarket.exe
ProductName: osmarket
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3691972929 also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.47591287
FireEyeTrojan.GenericKD.47591287
McAfeeArtemis!51BF48CECC1A
AlibabaTrojan:Application/Generic.1a151eb7
APEXMalicious
BitDefenderTrojan.GenericKD.47591287
AvastWin64:Malware-gen
Ad-AwareTrojan.GenericKD.47591287
McAfee-GW-EditionBehavesLike.Win64.Generic.cm
EmsisoftTrojan.GenericKD.47591287 (B)
SentinelOneStatic AI – Suspicious PE
GDataTrojan.GenericKD.47591287
GridinsoftRansom.Win64.Sabsik.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
ALYacTrojan.GenericKD.47591287
MAXmalware (ai score=85)
MalwarebytesMalware.AI.3691972929
eGambitUnsafe.AI_Score_98%
AVGWin64:Malware-gen

How to remove Malware.AI.3691972929?

Malware.AI.3691972929 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment