About “Malware.AI.4056450615” infection

The Malware.AI.4056450615 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4056450615 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• At least one process apparently crashed during execution
• Behavioural detection: Executable code extraction – unpacking
• Presents an Authenticode digital signature
• Creates RWX memory
• A process attempted to delay the analysis task.
• Dynamic (imported) function loading detected
• A named pipe was used for inter-process communication
• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Created a process from a suspicious location
• Anomalous binary characteristics

How to determine Malware.AI.4056450615?

File Info:
name: 046BD44D821CADC11323.mlw
path: /opt/CAPEv2/storage/binaries/68a825256baa2fca675cbb4927015444e83204e4e6a07286fd6dae8615d03f5a
crc32: EECBE546
md5: 046bd44d821cadc11323944161786206
sha1: f43d2dcd338c3a40f8bb3ad949414f002401c2c7
sha256: 68a825256baa2fca675cbb4927015444e83204e4e6a07286fd6dae8615d03f5a
sha512: 7eabd6da07faaff24ffca4acdbb327d8094bfb525a4e0a802c2bfb15b3792f1baf1201aeb78c4bf259990a650f70078158c07581822eac26c8104f45cd0d0545
ssdeep: 24576:9BOkUhMXcBwcCro4jXVav9Mk+WWh4f1tLeyWcRq4a:3UasqcVrv9MpWWhipXq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B9758C21B7F44076E0F286769876A326BE71BD151B30CACF5250BA1D5F336C19A7B322
sha3_384: a96cf579bb00ac9d0d7fa96d5d67ecbbb61e5da1c71ec40286d89a5af25f91b4b788a182ade75a12782a918ca61077cd
ep_bytes: e8101f0000e989feffffcccccccccccc
timestamp: 2014-10-24 21:31:46

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664
FileVersion: 12.0.40664.0
InternalName: setup
LegalCopyright: Copyright (c) Microsoft Corporation. All rights reserved.
OriginalFilename: vcredist_x64.exe
ProductName: Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664
ProductVersion: 12.0.40664.0
Translation: 0x0409 0x04e4

Malware.AI.4056450615 also known as:

How to remove Malware.AI.4056450615?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.