Malware.AI.4137236246 malicious file

The Malware.AI.4137236246 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4137236246 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Malware.AI.4137236246?


File Info:
name: 5D021507FCBB27624AF5.mlw
path: /opt/CAPEv2/storage/binaries/23d8152a26147cfd87f780f9fbc9d82e80ff271994d39f86a6cffcbde627076f
crc32: 2990AD8E
md5: 5d021507fcbb27624af581a135a9ef52
sha1: 9acc975c836f582ea6ddb39609e3790acd472840
sha256: 23d8152a26147cfd87f780f9fbc9d82e80ff271994d39f86a6cffcbde627076f
sha512: 13a00c751ddfe51f7e1e3e2b9d1b4f79052fc1e11b30ec8187f681748f1d4582645dbe54317dff03ae3348614bdfbd00c9456d0b9086395b278847ca5af821fc
ssdeep: 6144:ie6F2YJuoXdcTa9+mcna5zkrwSDcU2GC11K79eLM:izFJufTajcaZCpq11K7AM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15BB6CF01B2D568BAD3E5217C98B61B358BBDFD014A329A87E778ED5E1C31741E82930F
sha3_384: 5715edd744d2bcc6e0b5692799ab0635e784a778853d2d2ff185280d21b5698d04d609a40924110486ce27d521191296
ep_bytes: 558bec6aff68f818e900688812e80064
timestamp: 2006-02-02 02:45:13

Version Info:
Comments: 
CompanyName: Sysinternals - www.sysinternals.com
FileDescription: Rootkit detection utility
FileVersion: 1.70
InternalName: 
LegalCopyright: Copyright (C) 2005-2006 Bryce Cogswell and Mark Russinovich
LegalTrademarks: 
OriginalFilename: 
PrivateBuild: 
ProductName: Sysinternals Rootkitrevealer
ProductVersion: 1.70
SpecialBuild: 
Translation: 0x0409 0x04b0

Malware.AI.4137236246 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Swisyn.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.466842
FireEye	Gen:Variant.Ulise.466842
CAT-QuickHeal	Trojan.Swisyn.OD5
Skyhigh	BehavesLike.Win32.BadFile.vz
McAfee	Artemis!5D021507FCBB
Malwarebytes	Malware.AI.4137236246
Sangfor	Suspicious.Win32.Save.ins
Cybereason	malicious.7fcbb2
Symantec	ML.Attribute.HighConfidence
BitDefender	Gen:Variant.Ulise.466842
Emsisoft	Gen:Variant.Ulise.466842 (B)
VIPRE	Gen:Variant.Ulise.466842
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
ALYac	Gen:Variant.Ulise.466842
Varist	W32/Swisyn.R.gen!Eldorado
Antiy-AVL	GrayWare/Win32.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Ulise.D71F9A
GData	Win32.Trojan.PSE.C2K26Z
Cynet	Malicious (score: 100)
Google	Detected
MAX	malware (ai score=85)
Cylance	unsafe
Rising	Trojan.Generic@AI.88 (RDML:LnAHcYKHsdXQpfz/6XakIw)
Yandex	Trojan.Agent!7Rm5C4DE5j0
Ikarus	Trojan.Win32.Swisyn
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Swisyn.R!tr
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)
alibabacloud	Trojan:Win/Ulise

How to remove Malware.AI.4137236246?

Malware.AI.4137236246 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X