Malware

Malware.AI.4209730193 information

Malware Removal

The Malware.AI.4209730193 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4209730193 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Malware.AI.4209730193?


File Info:

name: D4912DDC85AC486E5E9F.mlw
path: /opt/CAPEv2/storage/binaries/4feaadf2be51282b9ec2d9b16abbeee8d4f1896fc8cf40fe0b9139966c754294
crc32: F12CE1DA
md5: d4912ddc85ac486e5e9fa35b719b014a
sha1: 3f3abe80fb404f6839dc8d2cd907dcee49df0534
sha256: 4feaadf2be51282b9ec2d9b16abbeee8d4f1896fc8cf40fe0b9139966c754294
sha512: 62ada26965f18d1df1a55aad60059071e2966c41a9590311d5ee1147ce761bead6a6d91b877397f3603bfd5a4bfdfe6ffdb07d8eb944b9c77baf2298eb06371c
ssdeep: 49152:DP0/dentP68b8+mQc9oIFP/4eWnAVsFnhbkCjlObZjrNgbnrnhX:Jlg+gTFPDWAVsFlk7bNrNq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T173E59C066B42C63DC060723A4DEFAB2413E9BED323B58706AF463D595DB1E8B7C47A41
sha3_384: 73da47c6659b541cace47519c5a18ba49f7495f8b6d7f9a3c14cd9a13129af0bdca0a3f0461d741f015428a342cf9303
ep_bytes: ff250020000100000000000000000000
timestamp: 2086-10-05 22:44:00

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName: Next
FileDescription: Next
FileVersion: 1.0.0.0
InternalName: Next.exe
LegalCopyright: Next Copyright © 2021
LegalTrademarks:
OriginalFilename: Next.exe
ProductName: Next
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.4209730193 also known as:

LionicTrojan.Win32.Bulz.4!c
MicroWorld-eScanGen:Variant.Bulz.572115
FireEyeGeneric.mg.d4912ddc85ac486e
ALYacGen:Variant.Bulz.572115
CylanceUnsafe
ArcabitTrojan.Bulz.D8BAD3
BitDefenderThetaGen:NN.ZemsilF.34062.4o0@a87Fn2c
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002H09L221
BitDefenderGen:Variant.Bulz.572115
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Bulz.572115
EmsisoftGen:Variant.Bulz.572115 (B)
McAfee-GW-EditionArtemis!Trojan
SophosGeneric ML PUA (PUA)
MaxSecureTrojan.Malware.300983.susgen
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataGen:Variant.Bulz.572115
McAfeeArtemis!D4912DDC85AC
MAXmalware (ai score=85)
MalwarebytesMalware.AI.4209730193
APEXMalicious
SentinelOneStatic AI – Malicious PE
FortinetPossibleThreat
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Malware.AI.4209730193?

Malware.AI.4209730193 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment