Malware.AI.428392752 malicious file

The Malware.AI.428392752 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.428392752 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Dynamic (imported) function loading detected
• Sample contains Overlay data
• Creates RWX memory
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The executable is compressed using UPX
• Authenticode signature is invalid

How to determine Malware.AI.428392752?

File Info:
name: F7741CA1D042F0F30991.mlw
path: /opt/CAPEv2/storage/binaries/7a99613f16332782ef46692d1d2aa9f18b045cb5d368b02811b34eab1d2bbece
crc32: 5CF76E6D
md5: f7741ca1d042f0f309916ad476e60e32
sha1: 4d9ee75918ba69bb9ce5704cfc1231276e95e98e
sha256: 7a99613f16332782ef46692d1d2aa9f18b045cb5d368b02811b34eab1d2bbece
sha512: bfef37927926191d84e1db9f551ae8c6dea5f7832b578d6b2df3aebf652905716fe2d7cf1a0c146be3d7d89369980aef6fbabeeef9e540d3a0a37398c5c7ea4d
ssdeep: 12288:Y5JK9wGnZERtQEibpUSwVpyFzjL/cpi55WGldMEKfov2Y0uAmDuU/22lTlpf:WJK9PnZ2IoydvrdkfoOY0u4U/jtf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A0F49E22B7D2C07AC57330310A96E76955BABDB05B3246C7B3882B3E1F741E16D3D16A
sha3_384: 3ff18c17b945ff220f149825d8dd0eabf40d269b1f6a6f771b755b49fbd1bc14b3a980fcd56bca72c710bd819159b1d2
ep_bytes: e8695e0000e979feffff3b0d30264900
timestamp: 2015-02-04 09:29:10

Version Info:
CompanyName: TODO: 
FileDescription: SHExplorer
FileVersion: 1.0.0.3
InternalName: WBrowser.exe
LegalCopyright: TODO: (C) 。保留所有权利。
OriginalFilename: WBrowser.exe
ProductName: TODO: 
ProductVersion: 1.0.0.3
Translation: 0x0804 0x03a8

Malware.AI.428392752 also known as:

How to remove Malware.AI.428392752?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.