About “Malware.AI.4220820452” infection

The Malware.AI.4220820452 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4220820452 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Binary compilation timestomping detected

How to determine Malware.AI.4220820452?

File Info:
name: 936B04D58F94C58BBEC9.mlw
path: /opt/CAPEv2/storage/binaries/683a50b3789616c293323c6d7a05170a05bf34bf5c38253f49daabd59f6a92a7
crc32: D3D6DE63
md5: 936b04d58f94c58bbec9b60bb53b7ff5
sha1: b8f57a1f31c21f678faef97f4fa346860fb3ce4e
sha256: 683a50b3789616c293323c6d7a05170a05bf34bf5c38253f49daabd59f6a92a7
sha512: 3f6a382064c77a2924439d1f0fd955adbcb8ddf197cae8bf6772ddc503ece79251955156b73496e2767ea568ff7b86b64bd9c1105f53d6def7398e4bdde8dd42
ssdeep: 768:SQjcAGliBK1eEAiCZlckvyk7DprD2sTN:SrAyNeiOlckvJ7DR2sp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6C3C33D369AC115D2AE0A350971F6D00F70AC5ABC21CB4AEE877B9E2E37741493CE91
sha3_384: ba45febff7de22d9cc7dff290d301c3e37399bee871ee42810a36b2ba20edd371a8afe05be0f8be4afb99b054cdc5bb4
ep_bytes: ff250020400000000000000000000000
timestamp: 2079-11-01 20:20:01

Version Info:
Translation: 0x0000 0x04b0
Comments: Initialization configuration environment for related s.
CompanyName: MicrosoftCorp
FileDescription: initConfig
FileVersion: 1.0.0.0
InternalName: initConfig.exe
LegalCopyright: Copyright © Microsoft 2021
LegalTrademarks: 
OriginalFilename: initConfig.exe
ProductName: MicrosoftCorp
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.4220820452 also known as:

How to remove Malware.AI.4220820452?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.