Malware.AI.3719789761 (file analysis)

The Malware.AI.3719789761 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3719789761 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Malware.AI.3719789761?


File Info:
name: B15B0E737D9B812F3EAC.mlw
path: /opt/CAPEv2/storage/binaries/e2c5f6b24d9c03c1e62813dbad186ddbf369088324f2456db37f8aeb3955114e
crc32: 9B0F2597
md5: b15b0e737d9b812f3eac195ae52b2316
sha1: a2e0246c87f70ad1ce19c707a2bebcf84acff04b
sha256: e2c5f6b24d9c03c1e62813dbad186ddbf369088324f2456db37f8aeb3955114e
sha512: 5b72a877650552804f7bc6cb8f012b08c0513de2bf5ecfce22eb0c416d5411be9143f45f1c2489f26b1c18059672937a79fe6a54ce4484daf7baec003ce43b00
ssdeep: 384:PfkoOoE6qFE2e+TgWDyILk24jXP9I2iU3XEYejSJTvhGlsQuBB:EoO79m+TvH2XP1iPSCa
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T104B2281953EA8736CCBE6B340822524117B2DE25E253EB6F9E54F06B5CBB3004F62756
sha3_384: 5ccf41ecd859fda50bfb4ba389b2551b325d4d90d998e908761ad0b2f101f0e7ef2399795d50e419a212599c9b6e4fe4
ep_bytes: ff250020400000000000000000000000
timestamp: 2012-01-05 04:42:22

Version Info:
Translation: 0x0000 0x04b0
FileDescription: WindowsApplication1
FileVersion: 1.0.0.0
InternalName: Soccers Booter 1.exe
LegalCopyright: Copyright ©  2012
OriginalFilename: Soccers Booter 1.exe
ProductName: WindowsApplication1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.3719789761 also known as:

Lionic	Trojan.Win32.Ursu.4!c
DrWeb	Trojan.DownLoader25.16899
MicroWorld-eScan	Gen:Variant.Ursu.808631
FireEye	Gen:Variant.Ursu.808631
ALYac	Gen:Variant.Ursu.808631
Cylance	Unsafe
Zillya	Tool.Flooder.Win32.1087
Sangfor	Hacktool.MSIL.Flooder.I
Alibaba	Trojan:MSIL/Generic.7b75ba61
K7GW	Hacktool ( 004ff4361 )
K7AntiVirus	Hacktool ( 004ff4361 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	MSIL/HackTool.Flooder.I
Paloalto	generic.ml
BitDefender	Gen:Variant.Ursu.808631
NANO-Antivirus	Trojan.Win32.GenericKD.esjvmt
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Generic.Pcsh
Comodo	Malware@#27ssogk0o36vr
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!PUP
Emsisoft	Gen:Variant.Ursu.808631 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_84%
Avira	TR/Flooder.apvpf
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Generic.ASMalwS.AE2FFD
Microsoft	Backdoor:Win32/Bladabindi!ml
GData	Gen:Variant.Ursu.808631
McAfee	Artemis!B15B0E737D9B
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.3719789761
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:pTe4ibYEz/ydopbIeiL45g)
Yandex	Riskware.Flooder!whbXeVpqFqE
MaxSecure	Trojan.Malware.74749039.susgen
Fortinet	MSIL/Flooder.I!tr
Webroot	W32.Malware.Gen
AVG	Win32:Malware-gen
Cybereason	malicious.37d9b8

How to remove Malware.AI.3719789761?

Malware.AI.3719789761 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X