Malware

Malware.AI.4266151257 malicious file

Malware Removal

The Malware.AI.4266151257 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4266151257 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Spanish (Chile)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Behavioural detection: Injection (Process Hollowing)
  • Behavioural detection: Injection (inter-process)
  • Creates a copy of itself
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4266151257?


File Info:

name: 8558EECB53F34405617C.mlw
path: /opt/CAPEv2/storage/binaries/086641bccd952cf74711125555cebdcb7f409007aff1d8656c1493570dc6f744
crc32: 86F63353
md5: 8558eecb53f34405617c0c90cd7731f5
sha1: 476e80f465ccc7fe07cd6a3029191264aaaf8194
sha256: 086641bccd952cf74711125555cebdcb7f409007aff1d8656c1493570dc6f744
sha512: 3c631ffe46d556dff080da625831ae1646a0d34caa9348361fd413f955019316a5919d799a4509a02eb6188001b727e8b465a0a16d4c5efb0d8e3f281a768365
ssdeep: 3072:VA/b6kRGC6m7He3yjIBF3Z9GwLkB4DWa0YUl:+j6q6mKRb9GakB4DW6Ul
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T174B502235B39EDB3F781003EB3DFEDDB8966A065BBCA00E7949A059643A43F73114259
sha3_384: 0419d1e8b5086c50f1685b636d4587a37850e6854dda0f282972977ea45c971567ad719bdbc3efa5104aedfdfa47a2b2
ep_bytes: 558becb804100000e873020000a10030
timestamp: 2013-06-19 16:12:46

Version Info:

0: [No Data]

Malware.AI.4266151257 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Mikey.137720
ClamAVWin.Trojan.Generic-9763885-0
CAT-QuickHealWorm.Esfury.A
ALYacGen:Variant.Mikey.137720
MalwarebytesMalware.AI.4266151257
ZillyaTrojan.Injector.Win32.203060
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaAI:Packer.DCB264891E
VirITTrojan.Win32.Zyx.AKC
CyrenW32/Esfury.C.gen!Eldorado
SymantecSMG.Heur!gen
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Injector.AIIY
ZonerTrojan.JS.32854
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Mikey.137720
NANO-AntivirusTrojan.Win32.AntiAV.cqkxpe
AvastWin32:DangerousSig [Trj]
TencentWorm.Win32.Autorun.zd
EmsisoftGen:Variant.Mikey.137720 (B)
BaiduWin32.Trojan-Dropper.Injector.g
F-SecureTrojan.TR/Dropper.Gen
DrWebWin32.HLLW.Siggen.4811
VIPREGen:Variant.Mikey.137720
McAfee-GW-EditionPWS-Zbot-FBGE!8558EECB53F3
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.8558eecb53f34405
SophosTroj/Inject-BOX
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Mikey.137720
JiangminTrojan/Onescan.ma
WebrootW32.Trojan.Gen
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.Unknown
XcitiumTrojWare.Win32.Injector.AQJ@4zto9a
ArcabitTrojan.Mikey.D219F8
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GoogleDetected
AhnLab-V3Trojan/Win32.Agent.R72946
McAfeePWS-Zbot-FBGE!8558EECB53F3
MAXmalware (ai score=80)
VBA32Worm.VB.Autorun.gen
Cylanceunsafe
PandaTrj/Genetic.gen
RisingWorm.Vobfus!8.10E (TFE:3:XzZkKIGsaR)
YandexTrojan.GenAsa!B7XYEtrc6Us
IkarusWorm.Win32.Esfury
MaxSecureTrojan.Malware.2588.susgen
FortinetW32/Generic.AC.753!tr
AVGWin32:DangerousSig [Trj]
Cybereasonmalicious.b53f34
DeepInstinctMALICIOUS

How to remove Malware.AI.4266151257?

Malware.AI.4266151257 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment