Categories: Malware

Malware.AI.4081545004 (file analysis)

The Malware.AI.4081545004 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4081545004 virus can do?

At least one process apparently crashed during execution
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.4081545004?


File Info:
name: EAF31FBAC9D3CFF44C30.mlwpath: /opt/CAPEv2/storage/binaries/f36bde4fe1e2f44cd691939a1137a7f9a106917a98e92dcd9c1f89c3acf45074crc32: 98B5E00Emd5: eaf31fbac9d3cff44c30c3466d594bb6sha1: 580ffe20b27eaacc8030daf62c19488aeaf36d85sha256: f36bde4fe1e2f44cd691939a1137a7f9a106917a98e92dcd9c1f89c3acf45074sha512: 4b834d72a77381f3523add782a4403dfa332d5e5d858d6ab47232552fedf9e713f480540942c225a7a7450bd350af589875ef4345e9826175b1759903f1a1734ssdeep: 12288:g+jkyWSSRd8yyomLmh6pEL5sNNn8HSUoP/ROnLFncCYSCAuRI4Y4pFm:TYyWVdhyomLmvFsxlrP/sna1O4Y9type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D5B4124B1E339B1BF175B234CD5BF37113763D6A68A5565BEA1CF40225723A80BA23B0sha3_384: 7eadb0f3b8a58e62143a25079911ae99a327c61aaa7261e14a1438d8eef3bd516fb51fcd55426c70f4fecfcd6ec3ff90ep_bytes: eb1e49742773206a7573742061207061timestamp: 2012-04-27 19:06:04
Version Info:
CompanyName: Аdobe Systems, Inc.FileDescription: Аdobе® Flаsh® Player Installer/Uninstaller 11.1 r103FileVersion: 11,1,103,55InternalName: Аdobе® Flаsh® Plаyеr Installer/Uninstallеr 11.1LegalCopyright: Copyright © 1996-2011 Аdobe, Inc.LegalTrademarks: Аdobе® Flash® PlayerOriginalFilename: FlаshUtil.exeProductName: Flаsh® Playеr Installer/UninstallerProductVersion: 11,1,103,55Translation: 0x0409 0x04b0

Malware.AI.4081545004 also known as:

Lionic	Trojan.Win32.Rbot.kZ09
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.eaf31fbac9d3cff4
McAfee	GenericRXFX-WI!EAF31FBAC9D3
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Generik.BJGBCPF
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Xorist.094e8c70
BitDefenderTheta	Gen:NN.ZexaF.34212.HC1@aWAhFVcO
VirIT	Trojan.Win32.Pakes.VJO
Symantec	Trojan.Gen
ESET-NOD32	a variant of Generik.BJGBCPF
APEX	Malicious
ClamAV	Win.Trojan.Agent-829870
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Bulz.44361
NANO-Antivirus	Trojan.Win32.Xorist.sissm
SUPERAntiSpyware	Ransom.Zusy/Variant
MicroWorld-eScan	Gen:Variant.Bulz.44361
Avast	Win32:Trojan-gen
Tencent	Win32.Trojan.Generic.Aosx
Ad-Aware	Gen:Variant.Bulz.44361
Sophos	Mal/Generic-S
Comodo	Malware@#1c9m0rsratvz9
Zillya	Trojan.Xorist.Win32.440
TrendMicro	TROJ_FRS.0NA103BL20
McAfee-GW-Edition	BehavesLike.Win32.Injector.hc
Emsisoft	Gen:Variant.Bulz.44361 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Bulz.44361
Jiangmin	Trojan/Xorist.cz
Webroot	W32.Malware.Gen
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Dropper]/Win32.Injector
Kingsoft	Win32.Troj.Undef.(kcloud)
Arcabit	Trojan.Bulz.DAD49
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Dropper/Win32.Injector.R73947
VBA32	Trojan.Bitrep
ALYac	Gen:Variant.Bulz.44361
Malwarebytes	Malware.AI.4081545004
TrendMicro-HouseCall	TROJ_FRS.0NA103BL20
Rising	Trojan.Kryptik!8.8 (CLOUD)
Yandex	Trojan.Xorist!H7wzCLc+vBk
Ikarus	Trojan-Ransom.Xorist
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Kryptik.GTW!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.ac9d3c
Panda	Generic Malware
MaxSecure	Trojan.Malware.4031587.susgen