Malware.AI.3902918892 (file analysis)

The Malware.AI.3902918892 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3902918892 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.3902918892?


File Info:
name: 92254EFD4E486B354FAF.mlw
path: /opt/CAPEv2/storage/binaries/2edfd6f213c8ae3bbbd51bd8a6ce156c1bd43d2058d3983b013357500513c3fe
crc32: CFB4EAA1
md5: 92254efd4e486b354fafe583b9220752
sha1: b635820cd8e4e9a57b7b0f42f23dd4b8028b4d17
sha256: 2edfd6f213c8ae3bbbd51bd8a6ce156c1bd43d2058d3983b013357500513c3fe
sha512: b6ad9f8f41b0d59205dd7eb99bfcbe54de5c5c9c4fd9d60a448ed21c96d673adb9c6d11772e0ad26570090958635b7edcefb1ee67b5444d6fc751f2654e2b5a1
ssdeep: 49152:MC/57tG+oVdwltG+oVdwltG+oVdwltG+oVdwltG+oVdwltG+oVdwltG+oVdwltGM:n/5RyHuyHuyHuyHuyHuyHuyHuyHG/5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14D16236FBE8DEBADCD48C3B44C341D693E94C426DCAC6DED9AD5A31F2242B8014159EC
sha3_384: 2a133e0b308495da0fba4e591df0aa0ae3805e6fcaf72f9f4959f7dd8da649b30ff784d8a4ce1a3323e0437f25da0f8a
ep_bytes: ff250020400000000000000000000000
timestamp: 2074-04-23 14:23:36

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: AutoUpdate
FileVersion: 1.0.0.0
InternalName: AutoUpdate.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: AutoUpdate.exe
ProductName: AutoUpdate
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3902918892 also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	malicious (high confidence)
Skyhigh	Artemis!Trojan
McAfee	GenericRXAA-FA!92254EFD4E48
Malwarebytes	Malware.AI.3902918892
Symantec	ML.Attribute.HighConfidence
Avast	Win32:TrojanX-gen [Trj]
Antiy-AVL	Trojan/Win32.SGeneric
AhnLab-V3	Trojan/Win.Generic.C5358518
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.3411146.susgen
Fortinet	PossibleThreat
AVG	Win32:TrojanX-gen [Trj]

How to remove Malware.AI.3902918892?

Malware.AI.3902918892 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X