Malware

Malware.AI.4256483331 removal guide

Malware Removal

The Malware.AI.4256483331 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4256483331 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Harvests cookies for information gathering
  • Anomalous binary characteristics

How to determine Malware.AI.4256483331?


File Info:

name: CA8CA8CD2B70DEE0FA45.mlw
path: /opt/CAPEv2/storage/binaries/ab4f6a76fb6db45137f7d9fe874ffe877882c4f057a2dfa015115edc6d426c70
crc32: 2B0973F1
md5: ca8ca8cd2b70dee0fa456f91f15606e3
sha1: e754ee46c4ecc2d4ae14a69350ec0b377bf6693c
sha256: ab4f6a76fb6db45137f7d9fe874ffe877882c4f057a2dfa015115edc6d426c70
sha512: 926484b557de378d96b502d4b42ce3f445b35e9b519e9409ba279b31097e31ce9e881ed4eadd97be3ff49c50b95a65d8896da6cecdc08cf0f63ef2d0332a848c
ssdeep: 24576:VE6Ehg7mM+M6RkMkIM7gE6Eh6731kXA/ihd4XvlXuLO31z8LCAE+/xR9BzlbLrl/:f0g7mM+M6RkMkIM7I067vkLgsc0
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T18D55BFC1F6DFB7CDD968807062E6C726235EBC45409A0FFF7186616A58700C2A5A7A3F
sha3_384: b46a4ced431b73f7a7bbfa256c6eb2368e07de7d437042f2f7e3d4da3b875076f36de7242bf749b0a36932ee240e5131
ep_bytes: 90554889e55648ffce57415441554156
timestamp: 2010-11-20 10:29:36

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Internet Explorer
FileVersion: 8.00.7601.17514
InternalName: iexplore
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: IEXPLORE.EXE
ProductName: Windows® Internet Explorer
ProductVersion: 8.00.7601.17514
Translation: 0x0409 0x04b0

Malware.AI.4256483331 also known as:

LionicVirus.Win64.Expiro.lZUD
Elasticmalicious (high confidence)
DrWebWin64.Expiro.108
ClamAVWin.Virus.Expiro-9849865-0
FireEyeGeneric.mg.ca8ca8cd2b70dee0
ALYacWin64.Expiro.Gen.3
CylanceUnsafe
ZillyaVirus.Expiro.Win64.34
K7AntiVirusVirus ( 0040f8071 )
AlibabaVirus:Win64/Expiro.289741f4
K7GWVirus ( 0040f8071 )
Cybereasonmalicious.d2b70d
ArcabitWin64.Expiro.Gen.3
CyrenW64/Expiro.D!gen
SymantecW64.Xpiro.F
ESET-NOD32Win64/Expiro.AG
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyVirus.Win64.Expiro.e
BitDefenderWin64.Expiro.Gen.3
NANO-AntivirusVirus.Win64.Expiro.dtfhve
MicroWorld-eScanWin64.Expiro.Gen.3
AvastWin32:Expiro-DD
TencentVirus.Win64.Expiro.ad
Ad-AwareWin64.Expiro.Gen.3
EmsisoftWin64.Expiro.Gen.3 (B)
BaiduWin64.Virus.Expiro.r
VIPREVirus.Win64.Expiro.gen.a (v)
TrendMicroPE64_EXPIRO.AR
McAfee-GW-EditionBehavesLike.Win64.Dropper.tc
SophosML/PE-A + W64/Expiro-S
SentinelOneStatic AI – Malicious PE
AviraW64/Expiro.AF
MAXmalware (ai score=83)
Antiy-AVLTrojan/Generic.ASVirus.2BB
GridinsoftRansom.Win64.Sabsik.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataWin64.Expiro.Gen.3
AhnLab-V3Win64/Expiro2.Gen
Acronissuspicious
McAfeeW64/Expiro.a
TACHYONVirus/W64.Expiro.C
MalwarebytesMalware.AI.4256483331
TrendMicro-HouseCallPE64_EXPIRO.AR
RisingVirus.Expiro!1.A140 (CLASSIC)
IkarusVirus.Win32.Expiro
FortinetW64/Expiro.Q
AVGWin32:Expiro-DD
PandaW32/Expiro.gen
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecurevirus.win64.expiro.gen

How to remove Malware.AI.4256483331?

Malware.AI.4256483331 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment