Malware.AI.4276610454 malicious file

The Malware.AI.4276610454 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.4276610454 virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous .NET characteristics
Anomalous binary characteristics

How to determine Malware.AI.4276610454?


File Info:
name: 8D219EC4B3221C9E18F0.mlw
path: /opt/CAPEv2/storage/binaries/15090f836230310f9074d7a296e428f70a2335f7668e844757244930a55f0ff8
crc32: 62041F54
md5: 8d219ec4b3221c9e18f05d663b245a7b
sha1: 08f956878fa7144d425a7be049d172ce743424d4
sha256: 15090f836230310f9074d7a296e428f70a2335f7668e844757244930a55f0ff8
sha512: db1e78181e9a3dfff5d43e3fd398534c227fea318e83919cad819c374b744677f83e95733dc5c3633f1baccea503d86baf8ee22f9f7c3ccc6e581d5aef42b80f
ssdeep: 49152:TYH/1a+eo/jZAs2XHXw6N9E2B4xuNpZfWK:q1a4/jZAsehTx4eZfWK
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T177953315929FB01EF5BB4B7FC5E05A5C3D3EE08ACE17C52BD258498289267C7FC81429
sha3_384: 921bedbf071250ce06bb7078a6acbebf6608a790682648a43c481d27316d408f9d250f9ec0eb5ea78df942c69b33ca4e
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2021-12-10 09:41:32

Version Info:
Translation: 0x0000 0x04b0
Comments: conhost.exe
CompanyName: System
FileDescription: conhost.exe
FileVersion: 70.0.3538.110
InternalName: syn conhost.exe
LegalCopyright:  
OriginalFilename: syn conhost.exe
ProductName: Microsoft Inc.
ProductVersion: 70.0.3538.110
Assembly Version: 0.0.0.0

Malware.AI.4276610454 also known as:

Lionic	Trojan.MSIL.Inject.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Tedy.59119
FireEye	Generic.mg.8d219ec4b3221c9e
CAT-QuickHeal	Trojan.MSIL
ALYac	Gen:Variant.Tedy.59119
Malwarebytes	Malware.AI.4276610454
Sangfor	Trojan.MSIL.Inject.gen
K7AntiVirus	Trojan ( 005813451 )
Alibaba	Trojan:MSIL/Injectgen.fb24229a
K7GW	Trojan ( 005813451 )
CrowdStrike	win/malicious_confidence_60% (W)
Cyren	W64/MSIL_Troj.BCG.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/CoinMiner.BMT
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.MSIL.Inject.gen
BitDefender	Gen:Variant.Tedy.59119
Avast	Win64:CoinminerX-gen [Trj]
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:/Ay+IHXZb/eVcdxb6aNNbA)
Ad-Aware	Gen:Variant.Tedy.59119
Sophos	Mal/Generic-S
DrWeb	Trojan.InjectNET.14
TrendMicro	TROJ_GEN.R002C0GLD21
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Tedy.59119 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1143071
Gridinsoft	Ransom.Win64.Gen.sa
Microsoft	Trojan:MSIL/Injectgen.MA!MTB
ViRobot	Trojan.Win32.Z.Tedy.2008576
GData	Gen:Variant.Tedy.59119
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C4567483
McAfee	Artemis!8D219EC4B322
MAX	malware (ai score=89)
VBA32	Trojan.MSIL.Inject
Cylance	Unsafe
TrendMicro-HouseCall	TROJ_GEN.R002C0GLD21
Tencent	Malware.Win32.Gencirc.11dec41a
Ikarus	Trojan.MSIL.CoinMiner
Fortinet	Adware/Miner
AVG	Win64:CoinminerX-gen [Trj]
Cybereason	malicious.78fa71
Panda	Trj/CI.A

How to remove Malware.AI.4276610454?

Malware.AI.4276610454 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X