Malware

What is “Malware.AI.4071589581”?

Malware Removal

The Malware.AI.4071589581 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4071589581 virus can do?

  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4071589581?


File Info:

name: FA1A186AB9C05D4CDA8F.mlw
path: /opt/CAPEv2/storage/binaries/f8c0022a0497204f9e688cdcc454e35be3abd62368fad82ec40e4990b4a32a27
crc32: 99965612
md5: fa1a186ab9c05d4cda8fe551e45a9a56
sha1: be535ccd22b2c3d4809af32dd9165aff56bda7ca
sha256: f8c0022a0497204f9e688cdcc454e35be3abd62368fad82ec40e4990b4a32a27
sha512: 8f1cca0fb8b946d02b0afd6268f68c86593f94d38f8249f7e53088c82ea48894274c742004170f7690c591737cd9b96802b909fd6b98cbfd82c7d625b603d65c
ssdeep: 1536:BtztSsleA6hj9Im4ULzlBWt7/rzrfEqDG7q9PubDY8x8cAHu:gsB6hjeouPzrc77OWw8x8cAO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15583F1D3BBB0E667F3A25B74056B5FD006D4CEA8794202B10304349F5CFB76271A5AE1
sha3_384: 253dc3d7ebdeb2809ae5ced81ebe073b4ae6c6ae8877ccc7719b9ee8d2b2140beabad0bc3628a1ae1316807395a95f58
ep_bytes: 6801204100c3aa8033c6ecdd24d09a1b
timestamp: 2002-11-28 10:40:48

Version Info:

CompanyName:
FileDescription: KeyGen MFC Application
FileVersion: 1, 0, 0, 1
InternalName: KeyGen
LegalCopyright: Copyright (C) 2001
LegalTrademarks:
OriginalFilename: KeyGen.EXE
ProductName: KeyGen Application
ProductVersion: 1, 0, 0, 1
Translation: 0x0409 0x04b0

Malware.AI.4071589581 also known as:

FireEyeGeneric.mg.fa1a186ab9c05d4c
MalwarebytesMalware.AI.4071589581
SangforTrojan.Win32.Agent.Ve57
Cybereasonmalicious.d22b2c
Elasticmalicious (moderate confidence)
APEXMalicious
CynetMalicious (score: 100)
SUPERAntiSpywareHack.Tool/Gen-KeyGen
McAfee-GW-EditionBehavesLike.Win32.Generic.mc
Trapminemalicious.high.ml.score
SophosGeneric ML PUA (PUA)
Ikarusnot-a-virus:RiskTool.Win32.HideRun
Antiy-AVLTrojan[Backdoor]/Win32.SpyBoter
GoogleDetected
AhnLab-V3Unwanted/Win32.Keygen.R443
McAfeeRDN/Generic.grp
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H06EJ23
YandexTrojan.GenAsa!kONh0/ECQWE
SentinelOneStatic AI – Suspicious PE
FortinetRiskware/Application
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Malware.AI.4071589581?

Malware.AI.4071589581 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment