Malware.AI.3758208576 (file analysis)

The Malware.AI.3758208576 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3758208576 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Checks for the presence of known windows from debuggers and forensic tools
• CAPE detected the EnigmaStub malware family
• Checks for the presence of known devices from debuggers and forensic tools
• Checks for the presence of known devices from debuggers and forensic tools
• Detects Bochs through the presence of a registry key
• Touches a file containing cookies, possibly for information gathering
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine Malware.AI.3758208576?

File Info:
name: 5229938B07934C71F899.mlw
path: /opt/CAPEv2/storage/binaries/59ce362bcedc027d37327001927080246e9d5af95c9a75c792a3804f59ef47d7
crc32: 78256B76
md5: 5229938b07934c71f8998c35d132fa2d
sha1: a58ce996ee876bf210df8890d4e42b5b6582a86d
sha256: 59ce362bcedc027d37327001927080246e9d5af95c9a75c792a3804f59ef47d7
sha512: 3a1acd47b272f4a67e160a9897827112825f688118a61bf9de333020e66bc1dd112a8d101552a49a80af9c1ce7fd4b6092cca381a90fb42fe20f8c64b5b4850b
ssdeep: 24576:LHK8Ao5ImVy89Qdho15MXacvju3gfocpA/ZpCJ9S6WrLWunWJOlDGiu:LHK8mmD9QTo15MXaLww8XbGLfQOly
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DC453347CE3874EED986A6B8E79DCCC57A643B16D92C8C375CF7991DB8102A08B40778
sha3_384: f4d4b98c951d6b07854061249f63d8b3b9ffa7cdbb1ed241ca4ee62bc961d098506bef0a862395164bc782e9f5cb1053
ep_bytes: eb08003e04000000000060e800000000
timestamp: 2022-11-01 09:30:01

Version Info:
Translation: 0x0000 0x04b0
Comments: BTT EWS Deleter
CompanyName: Bimmer Tuning Tools
FileDescription: BTT EWS Deleter
FileVersion: 1.1
InternalName: BTT EWS Deleter.exe
LegalCopyright: Copyright © Bimmer Tuning Tools 2022
LegalTrademarks: Bimmer Tuning Tools
OriginalFilename: BTT EWS Deleter.exe
ProductName: BTT EWS Deleter
ProductVersion: 1.1
Assembly Version: 1.1.0.0

Malware.AI.3758208576 also known as:

How to remove Malware.AI.3758208576?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.