About “Malware.AI.4249974507” infection

The Malware.AI.4249974507 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4249974507 virus can do?

CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with Confuser
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary file triggered YARA rule

How to determine Malware.AI.4249974507?


File Info:
name: C10266E1195D862E1D77.mlw
path: /opt/CAPEv2/storage/binaries/ec6ab51867341985bc25a039ac47385cab2c2d41a8f6c48e9306a1ebdc8b94b5
crc32: 915E4457
md5: c10266e1195d862e1d77c2645346589e
sha1: c3f7374386e43df80392eb33648d00253e78a0b2
sha256: ec6ab51867341985bc25a039ac47385cab2c2d41a8f6c48e9306a1ebdc8b94b5
sha512: b9246b4f7db6fa586cc395ce7cd5db07c85ab0e765443a26a619eb18ba1a3ec192876779edaba0c15ecf9cd1fbc8d6de41402a3ba48584ac448f2066f7a1ad7b
ssdeep: 12288:Zdj4huPFTNk9ruSk/Woynx4j7ju03/QLgE45x9VMk0r:ZRXPI9ru57jjILe9Qr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D794F1157F1696BCC9C7E47E78B804606634DDDDA19793072C3BB638AC666D223F2E80
sha3_384: 43408aa57da5b6b78ade136417ac63ea18fac277ab36d3bf8943fc08d14e16eb6432285d2dd7c75a7febcc391fac964f
ep_bytes: ff250020400000000000000000000000
timestamp: 2016-12-14 13:48:39

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: Chrome.exe
LegalCopyright: Copyright ©  2016
LegalTrademarks: 
OriginalFilename: Chrome.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.4249974507 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
FireEye	Generic.mg.c10266e1195d862e
Skyhigh	BehavesLike.Win32.Generic.gc
McAfee	Artemis!C10266E1195D
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Trapmine	malicious.high.ml.score
Ikarus	Trojan.MSIL.Crypt
Google	Detected
Antiy-AVL	GrayWare/Win32.Wacapew
Microsoft	Trojan:Win32/Wacatac.B!ml
BitDefenderTheta	Gen:NN.ZemsilF.36802.Bm0@aeTtOzb
Malwarebytes	Malware.AI.4249974507
Panda	Trj/CI.A
Rising	Trojan.Zpevdo!8.F912 (CLOUD)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
DeepInstinct	MALICIOUS

How to remove Malware.AI.4249974507?

Malware.AI.4249974507 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X