What is “Malware.AI.3945971671”?

The Malware.AI.3945971671 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3945971671 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.3945971671?


File Info:
name: 56512474BD49A5DC09EB.mlw
path: /opt/CAPEv2/storage/binaries/05694f864180adfb6157cb6f2124a6152fac6e4b16297c84b9d2aad680bd6f6f
crc32: 2B12520C
md5: 56512474bd49a5dc09eb2ae9ac84140f
sha1: d4b3ae5450b27b5df7f629b7bb02e9259c80cd3b
sha256: 05694f864180adfb6157cb6f2124a6152fac6e4b16297c84b9d2aad680bd6f6f
sha512: 2aa5d7ac4cf33a5274b7944e0c8b0c03895aaf0bac55586b44ec8ee8abd8f404fa1e1ae6de0781c9c9a9841ee0c413baa9be0f3f7b3f62102199d1904cd54eb8
ssdeep: 12288:NaHo0gn/+hofo1W7w5WXICCE0fHxkzEUTu9OM89GcQ9MW7w5WXICCE0fHMPSA:+gn/+hofoU8WXWEcUHT2MGn/8WXWEck
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CD15F1027694C873C28A5133C9E69BFEEBA5FD54CA229B433B487F2CFC711919B26154
sha3_384: 61b79d5c8a34f8ab8aa5148189d0a2d5b2983ebdf97d1445e8ca66701917ec33c1c09a1d5f68b8a0f345db57d18c8f37
ep_bytes: 558bec6aff682000430068d45a410064
timestamp: 1998-08-12 10:39:53

Version Info:
Comments: 
CompanyName: 
FileDescription: By looklike 
FileVersion: 1, 0, 0, 4
InternalName: ام عماشة لشحن الفلاشة
LegalCopyright: ???? (C) 2007
LegalTrademarks: 
OriginalFilename: Om 3amasha.EXE
PrivateBuild: 
ProductName: Om 3amasha
ProductVersion: 1, 0, 0, 4
SpecialBuild: 
Translation: 0x0804 0x04b0

Malware.AI.3945971671 also known as:

Bkav	W32.Common.EDACEE83
Lionic	Trojan.Win32.Generic.4!c
FireEye	Generic.mg.56512474bd49a5dc
Skyhigh	BehavesLike.Win32.Sality.cc
Malwarebytes	Malware.AI.3945971671
Sangfor	Trojan.Win32.Agent.V9jk
Cybereason	malicious.450b27
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Rising	Trojan.Generic@AI.96 (RDMK:d9yhlIQQeTpGbKYnUBXDpg)
Trapmine	suspicious.low.ml.score
Jiangmin	Trojan/VBKrypt.fphp
Microsoft	Trojan:Win32/Zpevdo.B
McAfee	Artemis!56512474BD49
DeepInstinct	MALICIOUS
Cylance	unsafe
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.117564371.susgen
BitDefenderTheta	Gen:NN.ZexaCO.36792.3q0@aCIwXJbj
AVG	Win32:WrongInf-A [Susp]
Avast	Win32:WrongInf-A [Susp]
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Malware.AI.3945971671?

Malware.AI.3945971671 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X