Malware

Malware.AI.464257825 (file analysis)

Malware Removal

The Malware.AI.464257825 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.464257825 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Behavioural detection: Injection (Process Hollowing)
  • Behavioural detection: Injection (inter-process)
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.464257825?


File Info:

name: 9B5B7EC460230866DC2F.mlw
path: /opt/CAPEv2/storage/binaries/833cbcb9e6fde5eb8a8e5437ee20812b21a8931d59dac1380cefb9fafbec7ef6
crc32: ECFA11BA
md5: 9b5b7ec460230866dc2fa26c6dffbb0f
sha1: 576171132fe108be5bf6f690b482567c691c8f37
sha256: 833cbcb9e6fde5eb8a8e5437ee20812b21a8931d59dac1380cefb9fafbec7ef6
sha512: 33bc440bc9598486632a8263e746ed8506cf0438f34a583ff3c6617865a24d983165eba29d4a5001645d8aa825517840e82f06400268e727667099a52141de59
ssdeep: 12288:0GGGsGTvgdKLW5PQlnOcPVwkV2Dbpf4Wiz9JqaqAg+0LK2:AwW96+U2DV7iz9rgvu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18EF4D0423960E0E3FC5F6DB68A21920CC97A396B1B5151C7371A27B69EB83D14A71F0F
sha3_384: 0c81c9a0f3c270174b5baf025e3120cb2bb5159c0d0a92f847721c6f48c5477537e47cb19e8f889867cf56bf3085896c
ep_bytes: e80e1a0000e91efeffff8bff558bec8b
timestamp: 2014-05-22 17:28:20

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Windows Media MPEG-4 Video Decoder
FileVersion: 11.0.5721.5145 (WMP_11.061018-2006)
InternalName: mpg4dmod.dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: mpg4dmod.dll
ProductName: Microsoft® Windows® Operating System
ProductVersion: 11.0.5721.5145
OleSelfRegister:
Translation: 0x0409 0x04b0

Malware.AI.464257825 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Mikey.116291
FireEyeGeneric.mg.9b5b7ec460230866
ALYacGen:Variant.Mikey.116291
SangforTrojan.Win32.Save.a
Cybereasonmalicious.460230
BitDefenderThetaGen:NN.ZexaF.36348.Tu0@aGql9Pdi
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Keygen.EG.Gen potentially unsafe
APEXMalicious
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Mikey.116291
AvastWin32:Crypt-RGM [Trj]
EmsisoftGen:Variant.Mikey.116291 (B)
F-SecureHeuristic.HEUR/AGEN.1315063
VIPREGen:Variant.Mikey.116291
McAfee-GW-EditionRansom-FLI!9B5B7EC46023
SophosMal/Gatak-D
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Mikey.116291
GoogleDetected
AviraHEUR/AGEN.1315063
ArcabitTrojan.Mikey.D1C643
ZoneAlarmUDS:DangerousObject.Multi.Generic
CynetMalicious (score: 99)
McAfeeRansom-FLI!9B5B7EC46023
MAXmalware (ai score=80)
VBA32BScope.Trojan.Razy
MalwarebytesMalware.AI.464257825
PandaTrj/Genetic.gen
RisingTrojan.Razy!8.73AD (TFE:6:TV93Bgu7ZoO)
IkarusTrojan-Banker.Dridex
AVGWin32:Crypt-RGM [Trj]
CrowdStrikewin/malicious_confidence_70% (D)

How to remove Malware.AI.464257825?

Malware.AI.464257825 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment