Malware.AI.4294915974 (file analysis)

The Malware.AI.4294915974 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.4294915974 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Presents an Authenticode digital signature
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• Enumerates running processes
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Installs itself for autorun at Windows startup
• Installs itself for autorun at Windows startup
• Created a service that was not started

How to determine Malware.AI.4294915974?

File Info:
name: 54C1E0CA4D73582AC7D6.mlw
path: /opt/CAPEv2/storage/binaries/2d3a0eaf5317d9df1181c2bf0e9ce88ce74e8a388009a56ab164f3986bc452fe
crc32: 6CE72D3C
md5: 54c1e0ca4d73582ac7d6cb435259362b
sha1: 2169f6e6b54c54150dcfd5fe4579bb301c3c5c00
sha256: 2d3a0eaf5317d9df1181c2bf0e9ce88ce74e8a388009a56ab164f3986bc452fe
sha512: b88d631a26f8d2fda5f63afc4662309898dc1b7ff5a27dcc75a974f4b0ae81f0c9a1583d5273e8b76903dda8b0804ecf976f39ef50e4f81eb2b0fa333a05c8bd
ssdeep: 49152:Pz1VUFWzCJegYMfKfiVZ88kXetY0k+SvNOU3:5OLJXfmirqMMvNOU3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E0A5F12E31C59F67E0D2867E42E6E8F1D017FD93670BF673B600B38E79A92C69511602
sha3_384: 8593ce27b60699922c882058854d3bd6b29de46a946ede0b0cc132c27c7423dea92230e40fb332f5e164d648a717bd60
ep_bytes: e8f8150000e978feffff8bff558bec8b
timestamp: 2018-12-11 10:07:44

Version Info:
CompanyName: Igor Pavlov
FileDescription: 7-Zip GUI
FileVersion: 16.04
InternalName: 7zg
LegalCopyright: Copyright (c) 1999-2016 Igor Pavlov
OriginalFilename: 7zg.exe
ProductName: 7-Zip
ProductVersion: 16.04
Translation: 0x0409 0x04b0

Malware.AI.4294915974 also known as:

How to remove Malware.AI.4294915974?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.