What is “Malware.AI.3519244173”?

The Malware.AI.3519244173 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3519244173 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.3519244173?


File Info:
name: F712B7C06B77B1C135FB.mlw
path: /opt/CAPEv2/storage/binaries/212011c134375f04536280f1c7edb7206f687297c383c73cf736fe98114a0f18
crc32: 5695EA2C
md5: f712b7c06b77b1c135fbf342ed136d48
sha1: 52df424683770e5e5a96c96c70ee7c1cda0ad8fb
sha256: 212011c134375f04536280f1c7edb7206f687297c383c73cf736fe98114a0f18
sha512: 8c406f2ab9eed5ac521974e0114a7ad011e3d877ffb91daa4a39b366f1dd2dec027a39ee79bb31de0c88be2e7b5820282f97ed1a6a1a7f4712910ce5fcc81777
ssdeep: 384:4Tk8b36XYPuTACQU4aL9MizbSXmjjj0ArywE8eyuwoEGKhP6qO5fSYbh7H:1LTAQLOu4qOv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D982294593FCC319E6FE1F366DB191104BB2B5028D71EA5D1A95202E1E73BA08A91B73
sha3_384: cecf967b7fbe671ffa971b10b4892273de42a21d3f2488b6ac2f4eb334af46c4b75ca9f4edab561e46cdde637e4af90d
ep_bytes: ff250020400000000000000000000000
timestamp: 2062-12-02 20:36:47

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: RemoteProcessKill
FileVersion: 1.0.0.0
InternalName: RemoteProcessKill.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: RemoteProcessKill.exe
ProductName: RemoteProcessKill
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3519244173 also known as:

MicroWorld-eScan	Trojan.GenericKD.61407276
FireEye	Trojan.GenericKD.61407276
ALYac	Trojan.GenericKD.61407276
VIPRE	Trojan.GenericKD.61407276
Sangfor	Trojan.Win32.Fakefilecoder.V91a
K7AntiVirus	Trojan ( 005931ca1 )
Alibaba	Trojan:MSIL/FakeFilecoder.7e4230ce
K7GW	Trojan ( 005931ca1 )
Cyren	W32/Cerbu.BJ.gen!Eldorado
Symantec	Trojan.Gen.MBT
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/FakeFilecoder.D
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.61407276
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Trojan.GenericKD.61407276
Sophos	Mal/Generic-S + Mal/ProcKill-A
TrendMicro	TROJ_GEN.R002C0RHO22
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.61407276 (B)
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.61407276
Webroot	W32.Trojan.Gen
Avira	TR/Redcap.hvjyv
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5227007
McAfee	Artemis!F712B7C06B77
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.3519244173
TrendMicro-HouseCall	TROJ_GEN.R002C0RHO22
Rising	Trojan.FakeFilecoder!8.10894 (CLOUD)
Ikarus	Trojan-Ransom.FileCrypter
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/Chgt.AD

How to remove Malware.AI.3519244173?

Malware.AI.3519244173 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X