Malware.AI.4090201311 malicious file

The Malware.AI.4090201311 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4090201311 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.4090201311?


File Info:
name: EAFC3756A1C3D017A151.mlw
path: /opt/CAPEv2/storage/binaries/8f1c0a2afee8e892d2f54c5bb9395097de7a3b3022d0236f918d4b1263bfb77d
crc32: 74C1C3F6
md5: eafc3756a1c3d017a1513dab5228fe17
sha1: 0ef35278d558b2850484902d83855b481da6c4e0
sha256: 8f1c0a2afee8e892d2f54c5bb9395097de7a3b3022d0236f918d4b1263bfb77d
sha512: 4248b6893c60b9e7f1232e8dd9eae36f79ffb957c33929580cbb95d71e3d2dba82d7e341f9e5cf97193b31bb0ac0313788edb77668b6984fdb43a8ffadfe97bb
ssdeep: 24576:zK+q3DsrGhXPsGtrFBsbtdvYN4fE6b+C2070xbGP:z0FXPsGtrFYw+Vb+UP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AD25BF2139C58532FCF311F606ECB966062FF4F407364ADB569433EE8628AD1AE33596
sha3_384: bb58e8d692652fb73941776b2ed23b61fcfd92479c88bf0e6300d78a7987a5770095e38f22f85eace5b13ed843de4178
ep_bytes: e9f2740400e944dc0500e9e3f90400e9
timestamp: 2022-08-28 08:49:21

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft .NET Framework IL assembler
FileVersion: 4.8.4084.0 built by: NET48REL1
InternalName: ilasm.exe
LegalCopyright: © Microsoft Corporation.  All rights reserved.
OriginalFilename: ilasm.exe
ProductName: Microsoft® .NET Framework
ProductVersion: 4.8.4084.0
Comments: Flavor=Retail
PrivateBuild: DDBLD340A
Translation: 0x0409 0x04b0

Malware.AI.4090201311 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Lazy.238286
FireEye	Gen:Variant.Lazy.238286
Cylance	Unsafe
ESET-NOD32	a variant of Win32/GenKryptik_AGen.KJ
Kaspersky	HEUR:Backdoor.Win32.Mokes.gen
BitDefender	Gen:Variant.Lazy.238286
DrWeb	Trojan.PWS.Stealer.32832
Ikarus	Trojan.Win32.RedlineStealer
GData	Gen:Variant.Lazy.238286
MAX	malware (ai score=82)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
VBA32	Malware-Cryptor.Limpopo
Malwarebytes	Malware.AI.4090201311
Avast	Win32:CrypterX-gen [Trj]
Rising	Backdoor.Mokes!8.619 (TFE:5:S0nMDSQTT0C)
AVG	Win32:CrypterX-gen [Trj]

How to remove Malware.AI.4090201311?

Malware.AI.4090201311 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X