Malware

What is “Malware.AI.4205149674”?

Malware Removal

The Malware.AI.4205149674 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Malware.AI.4205149674 virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

How to determine Malware.AI.4205149674?



File Info:

name: C2B00972D0E8C119E012.mlw
path: /opt/CAPEv2/storage/binaries/62a72dba3095befe4186aa71cfa0ac04c592dbafcc31df327da4b57154dae0c0
crc32: 7BF9D886
md5: c2b00972d0e8c119e012c51169eae1a5
sha1: 511976ccf0d2aa3a45549a519a6e2bc9e5e7c867
sha256: 62a72dba3095befe4186aa71cfa0ac04c592dbafcc31df327da4b57154dae0c0
sha512: df3c2b667b52d9ef5ce82c3b0428a5d34521369a58e52f0d20bb824493d7dfdff94829c5973df8d74875d356078a4bff899fb04d0cf739a998bae1c8d36fc1c5
ssdeep: 3072:IJhfd222+nSeAVz6S5QiYdLYcpdtnRPF9EVnb43jaI5grf09xwj:I3Y21nfUWkhYhBtnRPF9cCGrtj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T187E36D69D320D2BFE941C97C624E32C7D1BAAC757082D542FFA16D02AEF11C12CD5A9B
sha3_384: beffd9b602d3c5c68ab09b5caa4f52304ab08f19e986eec6e460fe2f946dcfdb041753cfc47f26225aeea01c753ca905
ep_bytes: 558bec81ec1c08000053565768d00700
timestamp: 2023-06-17 11:17:30


Version Info:

CompanyName: Google LLC
FileDescription: Google Chrome
FileVersion: 114.0.5735.134
InternalName: chrome_exe
LegalCopyright: Copyright 2023 Google LLC. All rights reserved.
OriginalFilename: chrome.exe
ProductName: Google Chrome
ProductVersion: 114.0.5735.134
CompanyShortName: Google
ProductShortName: Chrome
LastChange: fbfa2ce68d01b2201d8c667c2e73f648a61c4f4a-refs/branch-heads/5735@#1270
Official Build: 1
Translation: 0x0409 0x04b0

Malware.AI.4205149674 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Trojan.Heur.JP.ju2@aCfEzpai
FireEyeGeneric.mg.c2b00972d0e8c119
MalwarebytesMalware.AI.4205149674
Cybereasonmalicious.2d0e8c
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/PSW.Agent.ONW
APEXMalicious
KasperskyVHO:Trojan-PSW.Win32.Convagent.gen
BitDefenderGen:Trojan.Heur.JP.ju2@aCfEzpai
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:PWSX-gen [Trj]
EmsisoftGen:Trojan.Heur.JP.ju2@aCfEzpai (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen
VIPREGen:Trojan.Heur.JP.ju2@aCfEzpai
Trapminemalicious.moderate.ml.score
SophosML/PE-A
GDataGen:Trojan.Heur.JP.ju2@aCfEzpai
AviraTR/Crypt.ZPACK.Gen
MAXmalware (ai score=83)
ArcabitTrojan.Heur.JP.ED279F
ZoneAlarmVHO:Trojan-PSW.Win32.Convagent.gen
MicrosoftProgram:Win32/Wacapew.C!ml
CynetMalicious (score: 100)
BitDefenderThetaAI:Packer.6F3007051F
ALYacGen:Trojan.Heur.JP.ju2@aCfEzpai
VBA32BScope.Trojan.Downloader
Cylanceunsafe
RisingTrojan.Generic@AI.84 (RDML:cKtQAro4JV02O5mUVN/rrg)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:PWSX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (D)

How to remove Malware.AI.4205149674?

Malware.AI.4205149674 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment