Malware

Malware.AI.4265931749 malicious file

Malware Removal

The Malware.AI.4265931749 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4265931749 virus can do?

  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes executed files from disk

How to determine Malware.AI.4265931749?


File Info:

name: 1AA334DC3FB4BEC72ADB.mlw
path: /opt/CAPEv2/storage/binaries/93e7274dc4c6c8c839f97c81789fac9b1d4a793dcda8f586eac91dd428165477
crc32: 4D464E43
md5: 1aa334dc3fb4bec72adbea08d3bfccdd
sha1: 60b10ce1397ba0f3970502b96c1ff461ea5c3d5f
sha256: 93e7274dc4c6c8c839f97c81789fac9b1d4a793dcda8f586eac91dd428165477
sha512: fadd22e56093992ef8426ec49e98020830daddaa917378a941da0d662f1d7e33a2884100f75c4084fd2a486b9aea72cbbefc4066eb1bfb772e5dc3bd835d7e8b
ssdeep: 3072:KLy+bnr+O145GWp1icKAArDZz4N9GhbkrNEk1yZ0JNurN4+gAwUh5oy:KLy+bnr+fp0yN90QE1sNuh4kwUhu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FC24D003B7D89032E8B51B705CFB03C31A36BDA29D79835B3785695A1CB36C4A53672B
sha3_384: 327ea37a5638e81b58f204c36ad127816838b63ef2691702f3b3a85b410d5b1390c737d7acc6d0418edaab507b54edfe
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0409 0x04b0

Malware.AI.4265931749 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
DrWebTrojan.Siggen19.32857
MicroWorld-eScanGen:Heur.Crifi.1
FireEyeGen:Heur.Crifi.1
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
McAfeeArtemis!1AA334DC3FB4
Cylanceunsafe
ZillyaTrojan.Agent.Win32.3657840
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005aad751 )
AlibabaTrojanPSW:Win32/Stealerc.efc4719d
K7GWTrojan ( 005aad751 )
CrowdStrikewin/malicious_confidence_100% (W)
VirITTrojan.Win32.MSIL.EY
CyrenW32/Kryptik.JKR.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32multiple detections
APEXMalicious
KasperskyUDS:Trojan.MSIL.Agent.gen
BitDefenderGen:Heur.Crifi.1
NANO-AntivirusTrojan.Win32.Disabler.jvjrnv
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
AvastWin32:TrojanX-gen [Trj]
TencentMsil.Trojan.Agent.Dkjl
EmsisoftGen:Heur.Crifi.1 (B)
F-SecureTrojan.TR/ATRAPS.Gen
VIPREGen:Heur.Crifi.1
TrendMicroTROJ_GEN.R002C0DHS23
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
SophosTroj/PlugX-EC
SentinelOneStatic AI – Malicious SFX
GDataWin32.Trojan.PSE.LHGEKD
JiangminTrojan.PSW.Stealerc.bw
GoogleDetected
AviraTR/Dldr.Agent_AGen.xehvw
MAXmalware (ai score=80)
Antiy-AVLTrojan/Win32.Midie
ArcabitTrojan.Crifi.1
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
MicrosoftTrojan:MSIL/plugx!atmn
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.R600260
Acronissuspicious
ALYacGen:Heur.Crifi.1
MalwarebytesMalware.AI.4265931749
PandaTrj/Chgt.AD
RisingStealer.Stealerc!8.17BE0 (TFE:5:9AmSB0pL6gH)
YandexTrojan.Disabler!G6z7qDxyklM
IkarusTrojan.Spy.Stealer
FortinetMSIL/Disabler.DR!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.1397ba
DeepInstinctMALICIOUS

How to remove Malware.AI.4265931749?

Malware.AI.4265931749 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment