What is “Malware.AI.4271428561”?

The Malware.AI.4271428561 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4271428561 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with Confuser
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Malware.AI.4271428561?


File Info:
name: 2D97323EB416F25673FF.mlw
path: /opt/CAPEv2/storage/binaries/105fdfd89a1be438ab44274697de953100f3db7a215f877f865aa7235c1e0f89
crc32: 23282540
md5: 2d97323eb416f25673ff8fbd0098fed8
sha1: 237dc195dba09b13a0d4436717e89435b8804bea
sha256: 105fdfd89a1be438ab44274697de953100f3db7a215f877f865aa7235c1e0f89
sha512: 96cafb11c7c5458b300a2fb6411207bb9536bc4a8669baedfa60fb02a25338f047250c704bb7775452bac981186ceabb6cc4ae7cde57e2e0e02cb66608849e57
ssdeep: 6144:2+25QRK5ty0yanj4mtfa29I9Nw+wqCC5CFG4FAeUbG0:2+25QRO4ajjYKI3WKVLeUb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18754236BF14ECB52D3FA1B39C96AF0F4540563240015FBBA1814A9B3ED633B67966073
sha3_384: 42077c25f8f9aa1b819c21790ac9677f963b7645388fab3f17879fbe0b879b391cb8b0d614fa5b447ee6483d208c4764
ep_bytes: ff250020400000000000000000000000
timestamp: 2019-06-02 14:40:17

Version Info:
Translation: 0x0000 0x04b0
Comments: Little patch.
CompanyName: TEAM LAXiTY 2019
FileDescription: Patch
FileVersion: 1.0.0.0
InternalName: patch.exe
LegalCopyright: Bauer Lindemann 2019
LegalTrademarks: 
OriginalFilename: patch.exe
ProductName: patch01
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.4271428561 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.MSILPerseus.188497
FireEye	Generic.mg.2d97323eb416f256
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Gen:Variant.MSILPerseus.188497
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.947292
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Unwanted-Program ( 004bdc221 )
K7GW	Unwanted-Program ( 004bdc221 )
Cybereason	malicious.eb416f
BitDefenderTheta	Gen:NN.ZemsilF.34114.sm0@aK3MQL
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/HackTool.Patcher.B potentially unsafe
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.MSILPerseus.188497
NANO-Antivirus	Trojan.Win32.Patcher.fsaupt
Avast	FileRepMalware
Tencent	Win32.Trojan.Generic.Hugd
Ad-Aware	Gen:Variant.MSILPerseus.188497
Emsisoft	Gen:Variant.MSILPerseus.188497 (B)
Comodo	Malware@#1yyfk0bhz8o2f
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WGQ21
McAfee-GW-Edition	BehavesLike.Win32.PUP.dc
Sophos	Keygen (PUA)
Ikarus	Trojan.Bladabindi
GData	Gen:Variant.MSILPerseus.188497
Jiangmin	Trojan.Generic.dzqey
eGambit	Unsafe.AI_Score_99%
Gridinsoft	Ransom.Win32.Bladabindi.oa!s1
Arcabit	Trojan.MSILPerseus.D2E051
Microsoft	Backdoor:Win32/Tiggre!rfn
AhnLab-V3	Malware/Win.Generic.C4528972
McAfee	Artemis!2D97323EB416
MAX	malware (ai score=99)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.4271428561
TrendMicro-HouseCall	TROJ_GEN.R002C0WGQ21
Yandex	Trojan.Agent!CDlSVqxnDKk
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Generic
Webroot	W32.Trojan.Gen
AVG	FileRepMalware
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Malware.AI.4271428561?

Malware.AI.4271428561 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X