Malware

What is “Malware.AI.4265186055”?

Malware Removal

The Malware.AI.4265186055 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4265186055 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.4265186055?


File Info:

name: 85167FAFF4791CD7025F.mlw
path: /opt/CAPEv2/storage/binaries/0b9d5ad4e2346679092ee2fe91020570fba7476416148b546762a708d6f966ec
crc32: B65A6174
md5: 85167faff4791cd7025fe767bbcb42d9
sha1: a36a5a8e2ed72b1eee73c71b66c8a62fc3bb9c17
sha256: 0b9d5ad4e2346679092ee2fe91020570fba7476416148b546762a708d6f966ec
sha512: e962d3e53eb8a8a5f92ec2762158f1d11501968518a5f7fc70945fe8e629441c955be79b899de649941190b0196cda10d5b7eeafb082b9624e1b79bfc0e71ba6
ssdeep: 24576:TgtHU0FjpVPt7AeUVIGGvZhRxHh2W4GFZbYL7:TgtHUujpj7AewZCZhRdhE2eL
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T147758BD2A39511E8D029C174B7454122EA71B872CB24BADF0690F3792F67AD35B3AFD0
sha3_384: 754e2726c46033f0b2dfd4d5a0d9be1594290950a404fa7eeea428fa9a2851e4601f381fcd0e768a10d43cf3e7308d77
ep_bytes: 43544750514fbc600000000000000065
timestamp: 2022-01-27 20:22:04

Version Info:

CompanyName: Google LLC
FileDescription: Google Chrome
FileVersion: 92.0.4515.131
InternalName: notification_helper_exe
LegalCopyright: Copyright 2021 Google LLC. All rights reserved.
OriginalFilename: notification_helper.exe
ProductName: Google Chrome
ProductVersion: 92.0.4515.131
CompanyShortName: Google
ProductShortName: Chrome
LastChange: 6b8d6c56ce21e38a72f7c4becb5abc1fa5134f29-refs/branch-heads/4515@#1933
Official Build: 1
Translation: 0x0409 0x04b0

Malware.AI.4265186055 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanWin64.Expiro.Gen.6
FireEyeGeneric.mg.85167faff4791cd7
K7AntiVirusVirus ( 00535e4a1 )
K7GWVirus ( 00535e4a1 )
CyrenW64/Expiro.R.gen!Eldorado
ESET-NOD32a variant of Win64/Expiro.CO
APEXMalicious
ClamAVWin.Virus.Expiro-9886284-0
KasperskyVirus.Win64.Expiro.rd
BitDefenderWin64.Expiro.Gen.6
NANO-AntivirusVirus.Win64.Expiro.clnvwd
AvastWin64:Xpirat [Inf]
Ad-AwareWin64.Expiro.Gen.6
EmsisoftWin64.Expiro.Gen.6 (B)
DrWebWin64.Expiro.134
TrendMicroVirus.Win64.EXPIRO.MR
SophosML/PE-A + W64/Expiro-AV
GDataWin64.Expiro.Gen.6
JiangminTrojan.Bingoml.avt
AviraW64/Infector.Gen
Antiy-AVLTrojan/Generic.ASVirus.307
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
Acronissuspicious
ALYacWin64.Expiro.Gen.6
MAXmalware (ai score=85)
MalwarebytesMalware.AI.4265186055
TrendMicro-HouseCallVirus.Win64.EXPIRO.MR
IkarusVirus.Win64.Expiro
FortinetW64/Expiro.CE
AVGWin64:Xpirat [Inf]
Cybereasonmalicious.ff4791
MaxSecurevirus.win64.expiro.gen

How to remove Malware.AI.4265186055?

Malware.AI.4265186055 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment