Malware

About “Malware.AI.4268198591” infection

Malware Removal

The Malware.AI.4268198591 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4268198591 virus can do?

  • Sample contains Overlay data
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Spanish (Mexican)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Malware.AI.4268198591?


File Info:

name: B595AE98358879755E41.mlw
path: /opt/CAPEv2/storage/binaries/f73131b8b8268559e6a7036bbb09a6660d376f336fa3dae69d04c945c16612c7
crc32: 24BC4E29
md5: b595ae98358879755e41c5d364993b0c
sha1: dc871fa2cff800e007d5e4f3eb6c47389136487c
sha256: f73131b8b8268559e6a7036bbb09a6660d376f336fa3dae69d04c945c16612c7
sha512: f2a34da2eb35e734c37353e8f861cd2f820f6a6180a78fbbf4965ea67305b2f8933b53d9eca16b498df2cf2c13e4813913be52c87badaeefc90941a74c2b0c47
ssdeep: 6144:NZpsTt3p6Jez0juiqdcBhs87iD3vYH+Igw92pI4idQUdwzMTIv9RZgmM:NAIlSGBN3H+Igw92pIWsqbV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AB949E26656C3F08D423B374B1071E3666F68F1F3A6915ACFAFE97B2F0749004A63196
sha3_384: b9e65f427ada97a490cae6793f9e7bd7ade780bf02e55458cc022dd8357125d5ee59cf8432a4500a1e7671796661bff0
ep_bytes: 60be00b053068dbe0060ecf957eb0b90
timestamp: 2019-03-16 00:43:22

Version Info:

CompanyName: methodizer
FileDescription: promonopolist
FileVersion: 8.6.1.4
InternalName: Morus.exe
LegalCopyright: Copyright (C) intorted 2018
OriginalFilename: Anostraca.exe
ProductName: calcaneocuboid
ProductVersion: 2.6.0.7
Translation: 0x0409 0x04b0

Malware.AI.4268198591 also known as:

LionicHeuristic.File.Generic.00×1!p
DrWebTrojan.PWS.Siggen2.8271
MicroWorld-eScanGen:Trojan.Heur.RP.AmLfbi50WoKi
FireEyeGeneric.mg.b595ae9835887975
ALYacGen:Trojan.Heur.RP.AmLfbi50WoKi
CylanceUnsafe
VIPREGen:Trojan.Heur.TP.Am1@bi50WoKi
SangforTrojan.Win32.Kryptik.V3au
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderGen:Trojan.Heur.RP.AmLfbi50WoKi
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderThetaAI:Packer.7A8A6C051F
CyrenW32/Kryptik.VY.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Kryptik.GRAB
TrendMicro-HouseCallTROJ_GEN.R002C0DIO22
Paloaltogeneric.ml
KasperskyBackdoor.Win32.Androm.veat
AlibabaTrojan:Win32/Kryptik.08782f94
RisingTrojan.Fuerboos!8.EFC8 (CLOUD)
Ad-AwareGen:Trojan.Heur.RP.AmLfbi50WoKi
ZillyaTrojan.Kryptik.Win32.1851317
TrendMicroTROJ_GEN.R002C0DIO22
McAfee-GW-EditionBehavesLike.Win32.Lockbit.gc
EmsisoftGen:Trojan.Heur.RP.AmLfbi50WoKi (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.Androm.ahoo
GoogleDetected
AviraDR/Delphi.Gen
MAXmalware (ai score=88)
Antiy-AVLTrojan/Generic.ASMalwS.A9D
MicrosoftTrojan:Win32/Zbot.RB!MTB
ArcabitTrojan.Heur.TP.E8C450
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
GDataGen:Trojan.Heur.RP.AmLfbi50WoKi
CynetMalicious (score: 99)
AhnLab-V3Malware/Win32.Generic.C3105298
VBA32BScope.Backdoor.MSIL.Noancooe
MalwarebytesMalware.AI.4268198591
PandaTrj/CI.A
APEXMalicious
TencentWin32.Trojan.Delphi.Pcnw
YandexTrojan.GenAsa!yCwBhUbyPgs
IkarusTrojan-Downloader
MaxSecureTrojan.Malware.1728101.susgen
FortinetW32/GenKryptik.GSSO!tr
AVGWin32:Malware-gen
Cybereasonmalicious.835887
AvastWin32:Malware-gen

How to remove Malware.AI.4268198591?

Malware.AI.4268198591 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment