Malware.AI.4134453860 (file analysis)

The Malware.AI.4134453860 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4134453860 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.4134453860?


File Info:
name: 4EA927CB015DBCBFEC19.mlw
path: /opt/CAPEv2/storage/binaries/8ab3edf6b80a09cab3e608e70db6d0f3b78da801240e28a3279c37d44a0e859f
crc32: 8DFFB158
md5: 4ea927cb015dbcbfec19d04f74980e62
sha1: e7190905e11845dd9c861efedd5af210cd389010
sha256: 8ab3edf6b80a09cab3e608e70db6d0f3b78da801240e28a3279c37d44a0e859f
sha512: 6dd71c3bc791cf1bc0753df479d269124edd2e4b2250d246ec4f80dcf844431df99c924687597303174442111dc9934140573f79e142b41eeb7b5a3544d2bf67
ssdeep: 3072:7kHV8kppLTYmafoAhs21vd3hMs5t5ReYVwx0C1ZBVSbyYLLLLL7LLLLFJYLLLLLN:7kHV8kppLTTkhhs2Lus5t50Iwx0gAbm6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E0E3BF0633AC5B2AC67E8FF56C395041C3F376679822E68D5E84A2DE18E13E18516FD3
sha3_384: fa7281cce1492d892e9d53da28da8b96de0113019cc1234c8f1192dd57feaa9db0e9bbb4907953172f490d52a4f83a19
ep_bytes: ff25002040000000000032000000f5ff
timestamp: 2096-08-02 22:21:46

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: CoazyINC
FileDescription: NoRecoil
FileVersion: 1.0.0.0
InternalName: NoRecoil.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: NoRecoil.exe
ProductName: NoRecoil
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.4134453860 also known as:

Lionic	Riskware.Win32.Bulz.1!c
MicroWorld-eScan	Gen:Variant.Bulz.463935
FireEye	Gen:Variant.Bulz.463935
CAT-QuickHeal	Trojan.IGENERIC
McAfee	RDN/Generic PUP.z
K7AntiVirus	Riskware ( 00589f131 )
K7GW	Riskware ( 00589f131 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/RiskWare.HackTool.Agent.AI
TrendMicro-HouseCall	TROJ_GEN.R002H09L221
BitDefender	Gen:Variant.Bulz.463935
Avast	FileRepMalware
Tencent	Win32.Trojan.Bulz.Pgxd
Ad-Aware	Gen:Variant.Bulz.463935
McAfee-GW-Edition	RDN/Generic PUP.z
Emsisoft	Gen:Variant.Bulz.463935 (B)
GData	Gen:Variant.Bulz.463935
Antiy-AVL	Trojan/Generic.ASMalwS.34E3ECF
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Win.Generic.C4810965
MAX	malware (ai score=85)
Malwarebytes	Malware.AI.4134453860
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/HackTool_Agent
AVG	FileRepMalware

How to remove Malware.AI.4134453860?

Malware.AI.4134453860 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X