Malware.AI.3967146777 (file analysis)

The Malware.AI.3967146777 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.3967146777 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• A process attempted to delay the analysis task.
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Anomalous .NET characteristics
• Collects and encrypts information about the computer likely to send to C2 server
• Installs itself for autorun at Windows startup
• Unusual version info supplied for binary

How to determine Malware.AI.3967146777?

File Info:
name: D80F7A841F89C9C67852.mlw
path: /opt/CAPEv2/storage/binaries/c7a4590332a3269d897a97acc290ea8bd75da4e6c13874dc81294a23286a3f4c
crc32: 4B72070F
md5: d80f7a841f89c9c67852f124bdc19c66
sha1: 6aec5839cbe3a3cda1f0118c6ea1be5f59a93fbe
sha256: c7a4590332a3269d897a97acc290ea8bd75da4e6c13874dc81294a23286a3f4c
sha512: 7599bcc41cdd89eb13d473c5cfbd55e5906378af57003bc9b59b257d6f3b43e40d6d40df9e7734d8d0514dc6e35b658214324ea2102d9132b2ff1c119afb62e7
ssdeep: 12288:IGDOGXsnv7oSi1MO3jJPPWW/JQbcv8WWmFTkkC5huFZVvX:BvyzlSs4SIC+FZV/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F4E4080DF6F5BA05D78847B6C6CB8468C263AC052909D76ABEBB3B5D1D303D8D4CE846
sha3_384: e33366f42934b338babb9e6cd1e36297c02db4154d8eb5baf707cd9ad903a83f740d07271ab176650b979e08afec8e27
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-03-02 20:25:03

Version Info:
Translation: 0x0409 0x04b0
FileDescription: Skype
FileVersion: 8.81.0.268
InternalName: Skype.exe
LegalCopyright: (c) 2022 Skype and/or Microsoft
OriginalFilename: Skype.exe
ProductVersion: 8.81
Assembly Version: 0.0.0.0
CompanyName: Skype Technologies S.A.
ProductName: Skype
SquirrelAwareVersion: 1

Malware.AI.3967146777 also known as:

How to remove Malware.AI.3967146777?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.