Malware.AI.664133413 information

The Malware.AI.664133413 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.664133413 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.664133413?


File Info:
name: EC886E2ED9A7334E0DAB.mlw
path: /opt/CAPEv2/storage/binaries/e01010b269bf657fe9e403221ff786031f94d126adde2fb2b55dacf102cb6250
crc32: 04969758
md5: ec886e2ed9a7334e0dab71a8e9d5ede4
sha1: f2c9cd102b513c4e413054b9db130ee2487fe008
sha256: e01010b269bf657fe9e403221ff786031f94d126adde2fb2b55dacf102cb6250
sha512: 895aedfbb41df9dda7a2fad9be64a323b4d5aac5b975f2eba1b0a1ee01e647168501e26fa7203407637510fa69cc8d797b6a8718438c87bb8b35e76c0be300d6
ssdeep: 768:XppuhMUnaDqAjSX1spQIzbm2wrR2NPwY4VzHcwjdz9rDMA:fkaDq9yp7buIiVHdZuA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13943725CA9AC43A3F85E5BBD80E141035BF5A173FF22E68F089967D400A1BD48563B3B
sha3_384: 21473e361961125984a82770cf4b767e6a8ca7ff795e1547a945e7e6520adda64b2979471f008dcd31220c1ef1ba4c59
ep_bytes: ff250020400000000000000000000000
timestamp: 2099-05-07 23:11:43

Version Info:
Translation: 0x0000 0x04b0
Comments: ANTIBAN
CompanyName: ANTIBAN
FileDescription: ANTIBAN
FileVersion: 1.0.0.0
InternalName: ANTIBAN.exe
LegalCopyright: Copyright ©  2020
LegalTrademarks: 
OriginalFilename: ANTIBAN.exe
ProductName: ANTIBAN
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.664133413 also known as:

Lionic	Trojan.Win64.Agent.5!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILHeracles.20805
FireEye	Gen:Variant.MSILHeracles.20805
McAfee	RDN/Generic PUP.z
Sangfor	Rootkit.Win64.Agent.bhf
K7AntiVirus	RootKit ( 005407241 )
Alibaba	Rootkit:Win64/HacktoolX.dd6ee82d
K7GW	RootKit ( 005407241 )
Cybereason	malicious.02b513
Cyren	W32/MSIL_Agent.CKO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win64/Rootkit.Agent.AC
APEX	Malicious
Kaspersky	Rootkit.Win64.Agent.bhf
BitDefender	Gen:Variant.MSILHeracles.20805
Avast	Win64:HacktoolX-gen [Trj]
Ad-Aware	Gen:Variant.MSILHeracles.20805
Emsisoft	Gen:Variant.MSILHeracles.20805 (B)
TrendMicro	TROJ_GEN.R002C0WKJ21
McAfee-GW-Edition	RDN/Generic PUP.z
Sophos	Mal/Generic-S
Ikarus	Trojan.Win64.Rootkit
GData	Gen:Variant.MSILHeracles.20805
Avira	HEUR/AGEN.1145371
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Malware/Win.Generic.C4632312
ALYac	Gen:Variant.MSILHeracles.20805
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.664133413
TrendMicro-HouseCall	TROJ_GEN.R002C0WKJ21
Rising	Trojan.MalCert!1.BDE5 (CLASSIC)
Yandex	Rootkit.Agent!4N0wCuOZIEY
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Rootkit.AC!tr
AVG	Win64:HacktoolX-gen [Trj]
Panda	Trj/GdSda.A

How to remove Malware.AI.664133413?

Malware.AI.664133413 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X