What is “Malware.AI.3844325980”?

The Malware.AI.3844325980 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3844325980 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.3844325980?


File Info:
name: ECDB87B8340F6B26270B.mlw
path: /opt/CAPEv2/storage/binaries/dfeff3800456292c010c6c295fbcca30181b9d01482c514e80008956a0a86186
crc32: 778D5263
md5: ecdb87b8340f6b26270b76d0ff1d51fb
sha1: 0ab6dcf71cba28ee004120c34bad68f2228c23e3
sha256: dfeff3800456292c010c6c295fbcca30181b9d01482c514e80008956a0a86186
sha512: 2312bc774bb788dbac9e1290fd7eb54d3f2f6c880722e3ed6bf22955deb063dfba1b9052e652b931822bc66cee3ac23749c0dbd993d2a3363b867a4aa9a706ad
ssdeep: 12288:W+JeY3/C//RYaQwEZ+/xMjbjEbxl+XKDAq:WdY3xwEZ+/TxkXKD/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T109949C11B5C0C437E1A228758DAEC778A569B9702F2581CB77D91B1EDF347C2AA3930B
sha3_384: 0c2bb8af5e7f9aa5ef882911b6ef2056b37a34cca3312fd303fd71efb466b102d67cafc339c9001e682f401cac7c8767
ep_bytes: d0eb0233c05f5e5bc9c38bff558bec8b
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Malware.AI.3844325980 also known as:

Bkav	W32.AIDetectMalware
FireEye	Generic.mg.ecdb87b8340f6b26
CAT-QuickHeal	W32.AgentNBE.A8
CrowdStrike	win/malicious_confidence_90% (W)
Elastic	malicious (high confidence)
APEX	Malicious
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Worm[Email]/Win32.Siho
Cynet	Malicious (score: 100)
McAfee	Artemis!ECDB87B8340F
Malwarebytes	Malware.AI.3844325980
Rising	Trojan.Generic@AI.100 (RDML:OUUQBIWRVtLn+VKTyszKTg)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
Cybereason	malicious.71cba2
DeepInstinct	MALICIOUS

How to remove Malware.AI.3844325980?

Malware.AI.3844325980 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X