Malware

Malware.AI.4280112550 information

Malware Removal

The Malware.AI.4280112550 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4280112550 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.4280112550?


File Info:

name: 56BA6046196C0EDB6C5B.mlw
path: /opt/CAPEv2/storage/binaries/38d313a8ce7e206c87ff518ead033d2642a6bd881cb2390ecf29f880c63e7bd8
crc32: D202C7C1
md5: 56ba6046196c0edb6c5bbc2ba3d485ed
sha1: ebf186ce9ca8e83e889acf47a25989374b92504e
sha256: 38d313a8ce7e206c87ff518ead033d2642a6bd881cb2390ecf29f880c63e7bd8
sha512: 2ab4ec1ee7a5e72f7fdf5c31a2facaa6a7a338b4df46c53df9c29f03a8827c1055d3705acef4d82a36cb3cf3a75d7172e471d126eded27fd08d1be814cf5f468
ssdeep: 49152:Vu2djbgo/eSdq07AvlvraPjMukROAuhNa0Wg/:Vu2djiajmROjj7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CAA533456B4C949EC0242D30C8B1D3B253AAAE4B71D5724BEEB6AEDF3436074DE0B59C
sha3_384: e7b3e22abd3028e1f85f4e573c6c1a42ab1ba378e824bb7feddf600ac2e6ad7ced8c8552e4739ebb7af11bdf681c293e
ep_bytes: 6801b06a00e801000000c3c37f615c93
timestamp: 2021-04-15 10:10:48

Version Info:

CompanyName: Assistant stuff
FileDescription: assistant file helper
FileVersion: 2.0.3.34
InternalName: assistant.exe
LegalCopyright: Copyright (c) 2021 Assistant stuff Co
OriginalFilename: assistant.exe
ProductVersion: 2.0.2.34
Translation: 0x0000 0x04b0

Malware.AI.4280112550 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.69484888
FireEyeTrojan.GenericKD.69484888
SkyhighBehavesLike.Win32.Sality.vc
McAfeeArtemis!56BA6046196C
Cylanceunsafe
SangforTrojan.Win32.Agent.Va07
AlibabaTrojan:Win32/Generic.65a98e22
ArcabitTrojan.Generic.D4244158
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
APEXMalicious
BitDefenderTrojan.GenericKD.69484888
AvastWin32:Malware-gen
EmsisoftTrojan.GenericKD.69484888 (B)
F-SecurePotentialRisk.PUA/Agent.IA
VIPRETrojan.GenericKD.69484888
Trapminemalicious.high.ml.score
SophosGeneric Reputation PUA (PUA)
SentinelOneStatic AI – Suspicious PE
WebrootW32.Trojan.Gen
VaristW32/ABTrojan.XUNO-5916
AviraPUA/Agent.IA
Antiy-AVLTrojan/MSIL.Cryptor
MicrosoftTrojan:MSIL/Cryptor
GDataTrojan.GenericKD.69484888
GoogleDetected
ALYacTrojan.GenericKD.69484888
MAXmalware (ai score=85)
MalwarebytesMalware.AI.4280112550
TrendMicro-HouseCallTROJ_GEN.R002H09J423
RisingTrojan.Zpevdo!8.F912 (TFE:5:j7nqKuQsXEG)
MaxSecureTrojan.Malware.119218462.susgen
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Malware.AI.4280112550?

Malware.AI.4280112550 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment