Malware

Malware.AI.4122360365 (file analysis)

Malware Removal

The Malware.AI.4122360365 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4122360365 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Injection with CreateRemoteThread in a remote process
  • Creates RWX memory
  • Unconventionial language used in binary resources: Danish
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Creates a copy of itself
  • Creates a slightly modified copy of itself

How to determine Malware.AI.4122360365?


File Info:

crc32: E8CC1B4F
md5: b1a0e2fc36db7fe718fed20cec057d6d
name: B1A0E2FC36DB7FE718FED20CEC057D6D.mlw
sha1: 987be3207acf0dc4d749527c1984137cd4dc3d1a
sha256: 50fa0f4d2c894d329681d170434f03093268f3bc103e6af905ff6267705def40
sha512: b767f4ad10a4e95fffc5275d613fe48719ae6515932dd9694cf290c4d98fa26ea944eaa96afda951ae0b840ae3409b2a3131e5b5825250ece1eaa3e603f60e0e
ssdeep: 12288:I4ZVqHMorZYlHn8DQTi3bLVsRFgWp03j75cBb9KuMpf0KUoFb:fo58n+bhsTgWa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Malware.AI.4122360365 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005362211 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader26.46631
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Chapak.ZZ6
ALYacTrojan.BRMon.Gen.4
CylanceUnsafe
ZillyaBackdoor.Mokes.Win32.1281
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Predator.5e671827
K7GWTrojan ( 005362211 )
Cybereasonmalicious.c36db7
CyrenW32/S-07a576a7!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GIJO
APEXMalicious
AvastFileRepMalware
ClamAVWin.Packer.Crypter-6614720-1
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.BRMon.Gen.4
NANO-AntivirusTrojan.Win32.Coins.feqptm
MicroWorld-eScanTrojan.BRMon.Gen.4
TencentWin32.Trojan.Chapak.Pepc
Ad-AwareTrojan.BRMon.Gen.4
SophosMal/Generic-R + Mal/GandCrab-B
ComodoTrojWare.Win32.Chapak.GI@7q43kg
BitDefenderThetaGen:NN.ZexaF.34670.FuW@ayWiSfdG
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_GANDCRAB.SMALY-3
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
FireEyeGeneric.mg.b1a0e2fc36db7fe7
EmsisoftTrojan.BRMon.Gen.4 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Banker.NeutrinoPOS.eq
AviraHEUR/AGEN.1106540
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Predator.PVD!MTB
ArcabitTrojan.BRMon.Gen.4
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.BRMon.Gen.4
AhnLab-V3Trojan/Win.MalPe.X2055
Acronissuspicious
McAfeeGenericRXGG-UT!B1A0E2FC36DB
MAXmalware (ai score=99)
VBA32BScope.TrojanRansom.GandCrypt
MalwarebytesMalware.AI.4122360365
PandaTrj/CI.A
TrendMicro-HouseCallRansom_GANDCRAB.SMALY-3
RisingMalware.Strealer!8.1EF (CLOUD)
YandexTrojan.GenAsa!gLvEHrQaVTw
IkarusTrojan-Ransom.GandCrab
FortinetW32/GenKryptik.CNAR!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Backdoor.Predator.HwoCEpsA

How to remove Malware.AI.4122360365?

Malware.AI.4122360365 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment