Malware

Malware.AI.526137066 removal

Malware Removal

The Malware.AI.526137066 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.526137066 virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Malware.AI.526137066?


File Info:

name: 142B1B058C5AF94EB1FC.mlw
path: /opt/CAPEv2/storage/binaries/000bec265675900a37d53f66b20422b82ff490d4e3686d3a858a17bab58ebb59
crc32: 1F589B91
md5: 142b1b058c5af94eb1fc75eded1a3260
sha1: 31dd873ba0e058826a29454b60b639d69918464f
sha256: 000bec265675900a37d53f66b20422b82ff490d4e3686d3a858a17bab58ebb59
sha512: 06568050d5020acbd711b9e6c2af19a87f8b0288a8522d4af28ac614a534e7adfa4d1c294b126c0f3f27543a23c98194f2c758e5cf07ce2a9cce8cdde5541ff3
ssdeep: 1536:OuZYMaNylPYSAb8dBnoHDKDKrAIvLxaBrL:OeqYdBnu+DKrASxc
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14B73D714A7E84326F6BB0B71ADF5C0829936B953AD25D75D348D534D0B223C4CA23BBB
sha3_384: 1c3bc8c94bca1ef7967b9276f9ce4e71311e771ff8719fe0301d763dac427912e654f0abd236eefcd1bb11922f8cc727
ep_bytes: ff250020400000000000000000000000
timestamp: 2070-07-07 08:03:15

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription: SonicaCriptoInstaller
FileVersion: 1.0.0.0
InternalName: SonicaCriptoInstaller.exe
LegalCopyright: Copyright © 2020
LegalTrademarks:
OriginalFilename: SonicaCriptoInstaller.exe
ProductName: SonicaCriptoInstaller
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.526137066 also known as:

LionicTrojan.Win32.Bulz.4!c
MicroWorld-eScanGen:Variant.Razy.810878
FireEyeGen:Variant.Razy.810878
ALYacGen:Variant.Razy.810878
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.3648795
SangforTrojan.Win32.Wacatac.B
K7AntiVirusTrojan ( 0055ca031 )
AlibabaTrojan:MSIL/Kryptik.413616f5
K7GWTrojan ( 0055ca031 )
Cybereasonmalicious.58c5af
BitDefenderThetaGen:NN.ZemsilCO.34114.em0@a0nYIWf
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.TUW
APEXMalicious
BitDefenderGen:Variant.Razy.810878
AvastWin32:Trojan-gen
Ad-AwareGen:Variant.Razy.810878
EmsisoftGen:Variant.Razy.810878 (B)
ComodoMalware@#v5ifd1uxz84t
F-SecureHeuristic.HEUR/AGEN.1139869
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
IkarusTrojan.MSIL.Crypt
GDataGen:Variant.Razy.810878
AviraHEUR/AGEN.1139869
GridinsoftRansom.Win32.Wacatac.sa
ArcabitTrojan.Razy.DC5F7E
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
AhnLab-V3Malware/Win32.RL_Generic.C4278101
McAfeeArtemis!142B1B058C5A
MAXmalware (ai score=88)
MalwarebytesMalware.AI.526137066
TrendMicro-HouseCallTROJ_GEN.R002H0CL921
RisingMalware.Obfus/MSIL@AI.88 (RDM.MSIL:zQDYWVOI4/drWkRUR4lCIw)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.110772842.susgen
FortinetMSIL/Kryptik.TUW!tr
AVGWin32:Trojan-gen
PandaTrj/GdSda.A

How to remove Malware.AI.526137066?

Malware.AI.526137066 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment