What is “Malware.AI.1830027185”?

The Malware.AI.1830027185 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1830027185 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Malware.AI.1830027185?


File Info:
name: EDDDFEB0641A39C189CB.mlw
path: /opt/CAPEv2/storage/binaries/2ec29d6aeb2bcd324f4f2ee433abdba8019035e56711c68c348eec70ee2f0eed
crc32: 0F3CC774
md5: edddfeb0641a39c189cb55e6282c0054
sha1: 1b335be14edf5b412c75ddb5bb2ccd724f39c090
sha256: 2ec29d6aeb2bcd324f4f2ee433abdba8019035e56711c68c348eec70ee2f0eed
sha512: 24cc3d34db35071b435c2db6eefbc6842745bcba87329caff1b00ef89c572feaf67f8c1e45f019041faa5f758919d11309797c5efbe3e7760fbf9538a30caa17
ssdeep: 384:f063MJKN0dx5GsIHy4wcHu5HSbY2xpJij3D9:8X5LIHy6Ht82x2j3x
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E262C8343EE99036F2B3AF764EE576959A6EF7722E03992E205103074B23B40CDD1639
sha3_384: 2a271f72afb0c52005df6b1e40e0523dbe9e866df9cb52f720add56e4c3bd2ccd501d19aa288390998896fefacd63780
ep_bytes: ff250020400000000000000000000000
timestamp: 2087-04-06 17:52:50

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Testapp
FileVersion: 1.0.0.0
InternalName: Testapp.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Testapp.exe
ProductName: Testapp
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Malware.AI.1830027185 also known as:

Lionic	Trojan.MSIL.Swrort.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.InjectNET.5
MicroWorld-eScan	Trojan.GenericKD.38135398
FireEye	Generic.mg.edddfeb0641a39c1
McAfee	Artemis!EDDDFEB0641A
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0055b4f51 )
Alibaba	Trojan:MSIL/Swrort.1076b0db
K7GW	Trojan ( 0055b4f51 )
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34062.am0@aqWMakc
Cyren	W32/MSIL_Troj.AHQ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Rozena.P
TrendMicro-HouseCall	TROJ_GEN.R002H0CKS21
Kaspersky	HEUR:Trojan.MSIL.Swrort.gen
BitDefender	Trojan.GenericKD.38135398
Avast	Win32:DropperX-gen [Drp]
Tencent	Msil.Trojan.Swrort.Apdd
Ad-Aware	Trojan.GenericKD.38135398
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1136625
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.38135398 (B)
Ikarus	Trojan.MSIL.Rozena
GData	Trojan.GenericKD.38135398
MaxSecure	Trojan.Malware.300983.susgen
Avira	HEUR/AGEN.1136625
MAX	malware (ai score=85)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.C3453168
ALYac	Trojan.GenericKD.38135398
Malwarebytes	Malware.AI.1830027185
APEX	Malicious
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_87%
Fortinet	MSIL/Shelma.gen!tr
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.14edf5
Panda	Trj/GdSda.A

How to remove Malware.AI.1830027185?

Malware.AI.1830027185 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X