Malware

Malware.AI.4241180091 removal

Malware Removal

The Malware.AI.4241180091 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4241180091 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Deletes executed files from disk

How to determine Malware.AI.4241180091?


File Info:

name: D9D47C19F772EFCA076A.mlw
path: /opt/CAPEv2/storage/binaries/f9c6f0cc062049fafda45edf90a27227577ac6ed1d9a3166116beec21cfb6a6f
crc32: FCD5D474
md5: d9d47c19f772efca076acf175989f980
sha1: 02665ab674634028a76c5b141764468321e1eb99
sha256: f9c6f0cc062049fafda45edf90a27227577ac6ed1d9a3166116beec21cfb6a6f
sha512: 1271d65a27ae20d07114355aa7bd094c23eb27b6f8f4b3ad64d39026009096a2ec1f74303ea833450b34fe3fa14426554fc84836b558d46d42820b2b52341c49
ssdeep: 98304:JkLG0gAHVSF+vQQu4eCIALU/nB5q278Cao2LflG1ko:KuOPDD8/jT4Cao+flbo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F04602ABB378653EC06A4731067346164537BA5E652EAF0E1FE0A80ECF264703D76763
sha3_384: 2725ad7fcefe7217945f9d11536aef630b055ca9d069ddeb39c3f349b5933e505728138649d1b590c55fdddbfbc4aefd
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2022-04-14 16:10:23

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Inno Nsigshgiueh Installer Setup
FileVersion: 2.102.09
LegalCopyright:
OriginalFileName:
ProductName: Inno Nsigshgiueh Installer
ProductVersion: 2.102.09
Translation: 0x0000 0x04b0

Malware.AI.4241180091 also known as:

Elasticmalicious (moderate confidence)
CrowdStrikewin/grayware_confidence_60% (D)
ESET-NOD32a variant of Win32/Kryptik.HRNY
KasperskyVHO:Trojan.Win32.Inject.gen
AvastWin32:Evo-gen [Trj]
RisingMalware.Obscure/Heur!1.9E03 (CLASSIC)
Trapminemalicious.moderate.ml.score
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmVHO:Trojan.Win32.Inject.gen
CynetMalicious (score: 100)
MalwarebytesMalware.AI.4241180091
TencentTrojan.Win32.Offloader.zk
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.674634

How to remove Malware.AI.4241180091?

Malware.AI.4241180091 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment