Malware

Malware.AI.2500824527 removal

Malware Removal

The Malware.AI.2500824527 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.2500824527 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Arabic (Syria)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Malware.AI.2500824527?


File Info:

name: EB38EE61B42373E0D3A9.mlw
path: /opt/CAPEv2/storage/binaries/6043cafd538cdfc54375f2d755c2e928033917a329ea234f3a8e11d7d9574b05
crc32: 2C21E34D
md5: eb38ee61b42373e0d3a9b0f09a07d2f6
sha1: 7154b4fd3fa74cd35c846f75ad905850988a8dd4
sha256: 6043cafd538cdfc54375f2d755c2e928033917a329ea234f3a8e11d7d9574b05
sha512: 80ba7537c005f5a37a2cbf337ac2acfdd409e5b37b799d3c9d07c86dded166243baa1cc20a226613acaa237743cd453feaa74f940f035bba3278ad1ccbfc05c0
ssdeep: 12288:/7gKNkhm/JuyXnPB+B8WH4KM1pdZlCXRirK+E+lb/zS82NvJ1TnEuth:/7zNkhm5PB3X5FZ34l7t
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19DD44B8273E84588F9B37A311D75BB18E53E79E1DE24E60C198D24690F34A41BB14FBB
sha3_384: 1aea4d08969411948e9b6e58c83e7b44f12e3e92dac7c52d370b2a6726316d1587e3a49f5ee7f424b8144409f4a13973
ep_bytes: 5150528d0d18000000648b0101c801c8
timestamp: 2021-04-16 09:49:51

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft Edge Update
FileVersion: 1.3.141.59
InternalName: Microsoft Edge Update
LegalCopyright: Copyright Microsoft Corporation
OriginalFilename: msedgeupdate.dll
ProductName: Microsoft Edge Update
ProductVersion: 1.3.141.59
LanguageId: sr-Cyrl-RS
UpstreamVersion: 1.3.99.0
Translation: 0x0409 0x04b0

Malware.AI.2500824527 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
DrWebWin32.Expiro.150
MicroWorld-eScanWin32.Expiro.Gen.6
FireEyeGeneric.mg.eb38ee61b42373e0
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (D)
K7GWVirus ( 0058dc741 )
K7AntiVirusVirus ( 0058dc741 )
BitDefenderThetaAI:Packer.56D7D84F1F
VirITWin32.Expiro.CV
CyrenW32/Expiro.AN.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Expiro.CP
TrendMicro-HouseCallVirus.Win32.EXPIRO.AD
ClamAVWin.Virus.Expiro-9923111-0
KasperskyVirus.Win32.Expiro.ns
BitDefenderWin32.Expiro.Gen.6
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Xpirat-C [Inf]
TencentVirus.Win32.Expiro.ns
SophosML/PE-A
TrendMicroVirus.Win32.EXPIRO.AD
McAfee-GW-EditionBehavesLike.Win32.Catalina.hc
EmsisoftWin32.Expiro.Gen.6 (B)
IkarusVirus.Win32.Expiro
JiangminTrojan.PSW.Stealer.abj
AviraW32/Infector.Gen8
Antiy-AVLTrojan/Generic.ASVirus.315
MicrosoftTrojan:Win32/Raccoon.EC!MTB
ZoneAlarmVirus.Win32.Expiro.ns
GDataWin32.Expiro.Gen.6
CynetMalicious (score: 100)
VBA32BScope.Trojan.Wacatac
ALYacWin32.Expiro.Gen.6
MAXmalware (ai score=87)
MalwarebytesMalware.AI.2500824527
APEXMalicious
RisingMalware.Heuristic!ET#79% (RDMK:cmRtazqh6u8A07yNUya2gj1jSpJ5)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Expiro.NDG
AVGWin32:Xpirat-C [Inf]
Cybereasonmalicious.1b4237

How to remove Malware.AI.2500824527?

Malware.AI.2500824527 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment