Malware

Malware.AI.3912919008 information

Malware Removal

The Malware.AI.3912919008 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.3912919008 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Malware.AI.3912919008?


File Info:

name: E9E62FA55F75E26839F0.mlw
path: /opt/CAPEv2/storage/binaries/dd1982155965149184b52246b461873eae39f96613fee74862cf20f31c1fcf3f
crc32: E78CFA48
md5: e9e62fa55f75e26839f023a552b7bdb8
sha1: 906f3eebe4ccb3142c39f3fbf6a7b115dd9633aa
sha256: dd1982155965149184b52246b461873eae39f96613fee74862cf20f31c1fcf3f
sha512: 3bc6644d99b93c95aed578c93363cf3097088a89c2afac08e343a20ecfd69ff80fcad937c0b730beeefda94689ea75bb0c9f65844dcec4261d04e8fc97b8c36e
ssdeep: 98304:kBuGoEd+inMgKr9Ub246brsrxCD8GLs0h4duyv3DMz9bJMh3:koGoDFr9U/6/LD8I4rwz9bJMx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17A463306170FD9AEFA685A35F70BB6F094D1AC0DDF24928B621B3ED3B67E3441487099
sha3_384: 8fc615c4a3b5e84c5234ca6154297431cfa53d07946ea02819c20c63025ab52f1d01e92cd89f48260c18d143534be273
ep_bytes: 60be0040d1008dbe00d06effc787ec70
timestamp: 2008-12-02 15:41:29

Version Info:

0: [No Data]

Malware.AI.3912919008 also known as:

LionicHacktool.Win32.ArchSMS.3!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
FireEyeGeneric.mg.e9e62fa55f75e268
CAT-QuickHealHoax.Archsms.21852
McAfeeGenericRXAA-AA!E9E62FA55F75
CylanceUnsafe
VIPREPacked.Win32.PWSZbot.gen (v)
AlibabaVirTool:Win32/Obfuscator.ccddcc95
CrowdStrikewin/malicious_confidence_60% (W)
VirITTrojan.Win32.SMSSend.SF
CyrenW32/Kryptik.DKT.gen!Eldorado
SymantecPUA.Gen.2
ESET-NOD32a variant of Win32/Kryptik.MHU
APEXMalicious
ClamAVWin.Trojan.Agent-1017783
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Adware.SMSHoax.25
NANO-AntivirusRiskware.Win32.ArchSMS.utmvj
MicroWorld-eScanGen:Variant.Adware.SMSHoax.25
AvastWin32:Adware-gen [Adw]
TencentMalware.Win32.Gencirc.10b4b1f8
Ad-AwareGen:Variant.Adware.SMSHoax.25
SophosMal/Generic-R + Mal/EncPk-ZC
ComodoMalware@#192xkwh9wn42p
DrWebTrojan.SMSSend.473
ZillyaTrojan.ArchSMS.Win32.377
McAfee-GW-EditionW32/Pinkslipbot.gen.ae
EmsisoftGen:Variant.Adware.SMSHoax.25 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Adware.SMSHoax.25
JiangminHoax.ArchSMS.bcm
WebrootW32.Adware.Gen
AviraTR/Crypt.ULPM.Gen
MAXmalware (ai score=100)
Antiy-AVLTrojan/Generic.ASMalwS.323628A
MicrosoftTrojan:Win32/Occamy.C
BitDefenderThetaAI:Packer.BA9DBEF320
ALYacGen:Variant.Adware.SMSHoax.25
VBA32Trojan.Zeus.EA.0999
MalwarebytesMalware.AI.3912919008
RisingTrojan.SMSSend!8.2DF7 (CLOUD)
YandexTrojan.GenAsa!K9QWYfIJ3gg
Ikarusnot-a-virus:Hacktool.SMSHoax
eGambitGeneric.Malware
AVGWin32:Adware-gen [Adw]
Cybereasonmalicious.55f75e
PandaTrj/Genetic.gen
MaxSecureTrojan.Malware.2217447.susgen

How to remove Malware.AI.3912919008?

Malware.AI.3912919008 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment