Malware.AI.4059100499 malicious file

The Malware.AI.4059100499 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4059100499 virus can do?

• Uses Windows utilities for basic functionality
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Attempts to identify installed AV products by installation directory
• Attempts to modify proxy settings
• Appears to use command line obfuscation
• Deletes executed files from disk
• Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.4059100499?

File Info:
name: 163015F9F968561969FE.mlw
path: /opt/CAPEv2/storage/binaries/e964969d07420f2d8b3a8bfa06c76218cc1d7bb23486cb545eadef655228351c
crc32: 18838975
md5: 163015f9f968561969fe3c67e9a0359a
sha1: 348e2a521c656d3529302d085cc7e5f94a413b6b
sha256: e964969d07420f2d8b3a8bfa06c76218cc1d7bb23486cb545eadef655228351c
sha512: fb8735598e70662136702b41ed25fd9583d807676e6dae70f440c58eb6602bcbebdb2378fa7dce806e6eb8baacf25224460380d9facae8f356059739b3333f73
ssdeep: 3072:KRy+bnr+O1k5GWp1icKAArDZz4N9GhbkrNEk1KlQQjoAoCSHS6DXu3XtYhrcJprn:KRy+bnr+zp0yN90QEflvSoNJpr3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11734D017ABD84473DDB527B05CFA02930A36BDA1AE74935B3395A95A0CB36C0A43533F
sha3_384: 294e1d1e0b390a5babed1071058585c1c0a47c74144eaaffc2417c7558d0f9ea29998ed322894911f86653996b918844
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor                                           
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract                
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE            .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0409 0x04b0

Malware.AI.4059100499 also known as:

How to remove Malware.AI.4059100499?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.