About “Malware.AI.4266036123” infection

The Malware.AI.4266036123 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4266036123 virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.4266036123?


File Info:
name: 85E6810EB092C67E3B2A.mlw
path: /opt/CAPEv2/storage/binaries/9cf4a691b0f47cf283fed9e3c81302967e140e773e32a385a640293da54be4c7
crc32: DBD8D636
md5: 85e6810eb092c67e3b2aa13855d67bda
sha1: ab003589e1c46d9c01d7427f754d29baca9b2b4c
sha256: 9cf4a691b0f47cf283fed9e3c81302967e140e773e32a385a640293da54be4c7
sha512: d10e0237dac6a29c4605b11677880976a65f5f6a37826c1f81c67d52ce78d635f464f66be395d4d9a27d7339ede57280566725f750515d2723a0bf3f39a531d0
ssdeep: 6144:grLVQHLR1JbRWAlAfeYuQk3loExx4rSg+axHUJdawoTKGkE3/eI:WpQfHlAfeYuPYSgeTavkq/e
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14BC4E002B7948D22D8B1733A8797DA34B373BC587E02934719C8BEA378721475E1979E
sha3_384: 1f4c1d52956f2e13f439f250532ecae2ee5e6fc71390ad9224a25276d5b8a66911923584fd27bb5318c8489ac9caf5fe
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-05-15 20:02:26

Version Info:
Translation: 0x0000 0x04b0
Comments: kata.gg
CompanyName: kata.gg
FileDescription: Discord
FileVersion: 11.10.374.9538
InternalName: Discord.exe
LegalCopyright: kata.gg
LegalTrademarks: kata.gg
OriginalFilename: Discord.exe
ProductName: kata.gg
ProductVersion: 11.10.374.9538
Assembly Version: 11.10.374.9538

Malware.AI.4266036123 also known as:

Lionic	Trojan.Win32.Ursu.4!c
MicroWorld-eScan	Gen:Variant.Ursu.319310
FireEye	Gen:Variant.Ursu.319310
CAT-QuickHeal	PUA.AgentFC.S22017866
ALYac	Gen:Variant.Ursu.319310
Cylance	Unsafe
Sangfor	Riskware.Win32.Uwamson.A
Cyren	W32/Trojan.BKMW-1132
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
BitDefender	Gen:Variant.Ursu.319310
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Gen:Variant.Ursu.319310
Sophos	Generic PUA KL (PUA)
TrendMicro	TROJ_GEN.R011C0PHJ21
McAfee-GW-Edition	GenericRXOV-XZ!85E6810EB092
Emsisoft	Gen:Variant.Ursu.319310 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Ursu.319310
Antiy-AVL	Trojan/Generic.ASMalwS.332FE44
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	GenericRXOV-XZ!85E6810EB092
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.4266036123
TrendMicro-HouseCall	TROJ_GEN.R011C0PHJ21
Fortinet	PossibleThreat
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.eb092c
MaxSecure	Trojan.Malware.73878217.susgen

How to remove Malware.AI.4266036123?

Malware.AI.4266036123 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X