Malware

About “Malware.AI.936657053” infection

Malware Removal

The Malware.AI.936657053 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.936657053 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.

How to determine Malware.AI.936657053?


File Info:

crc32: 97CF6821
md5: 2448271d92d345830b83916bd3e2ebf3
name: 2448271D92D345830B83916BD3E2EBF3.mlw
sha1: 32965da092bb4ebdf6a1475e5344610318b3baf1
sha256: 577337dc518c70a401a2c6d2f094722b501d04dfc8dc3ec9a2a5f675e769abaf
sha512: 55fd053fe0cbb450134702e25adfe015d05e98f46a70aeb870ee4ef5e68b2053d359cbc0982274cbcbad589b2cbb0ef56bd52e1fe6c41c28d264881a14f8e818
ssdeep: 1536:w3s5LsrMKi/IXkzgWUT3pZVjLn89ffznL79NmxsA99XjrbCzQ:w3s5LsQKiUkTUT5DCfLn9Nmd9LCM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2021
Assembly Version: 1.17845.21.12
InternalName: xYW2RW5ePv.exe
FileVersion: 15.48.15.5
CompanyName: Soft_Cpm___fK45GfS7BBdTN2SYZV9793v5sZ___
LegalTrademarks:
Comments: Soft_Cpm___fK45GfS7BBdTN2SYZV9793v5sZ___
ProductName: Soft_Cpm___fK45GfS7BBdTN2SYZV9793v5sZ___
ProductVersion: 15.48.15.5
FileDescription: Soft_Cpm___fK45GfS7BBdTN2SYZV9793v5sZ___
OriginalFilename: xYW2RW5ePv.exe

Malware.AI.936657053 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealPUA.GenericFC.S20328886
ALYacGen:Variant.Adware.Bulz.5473
MalwarebytesMalware.AI.936657053
ESET-NOD32a variant of MSIL/Adware.CsdiMonetize.BL
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
Kasperskynot-a-virus:HEUR:AdWare.MSIL.CSDI.gen
BitDefenderGen:Variant.Adware.Bulz.5473
MicroWorld-eScanGen:Variant.Adware.Bulz.5473
Ad-AwareGen:Variant.Adware.Bulz.5473
BitDefenderThetaGen:NN.ZemsilCO.34692.gm0@aaJzQ@p
FireEyeGen:Variant.Adware.Bulz.5473
EmsisoftGen:Variant.Adware.Bulz.5473 (B)
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Script/Wacatac.B!ml
ArcabitTrojan.Adware.Bulz.D1561
GDataGen:Variant.Adware.Bulz.5473
AhnLab-V3PUP/Win.Generic.C4387079
McAfeePUP-XOH-FK
MAXmalware (ai score=64)
PandaTrj/GdSda.A
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:AdwareX-gen [Adw]

How to remove Malware.AI.936657053?

Malware.AI.936657053 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment