What is “Malware.AI.3925265530”?

The Malware.AI.3925265530 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3925265530 virus can do?

Authenticode signature is invalid
CAPE detected the RedLine malware family
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.3925265530?


File Info:
name: A65F488695F0F4F586D9.mlw
path: /opt/CAPEv2/storage/binaries/c24ba68fa874f52e9b2ff668d87b07de9871a25cc1aefb6877f2137664e87c0a
crc32: 9E7FB0BA
md5: a65f488695f0f4f586d94e475f925fee
sha1: d82b49e7d03457bd0c0bd3c4bdd3a8cc558d1407
sha256: c24ba68fa874f52e9b2ff668d87b07de9871a25cc1aefb6877f2137664e87c0a
sha512: 6402eefc5b1365ce47e4a90bb6959feeec08faab43c20c894addb982be8b716f3e24f517c393f4c64e30a49d8cdd2daa84210a4f3d3d698a05000f193d142b87
ssdeep: 3072:yDKW1LgppLRHMYfFTBfJvjcTp5XbUAYTiTB:yDKW1LgbdltTBBvjc/2TiV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13F647D2075C0C1B2C4B6103485E5CAB99A7A38314B6995D7B69D3FBB7E313E1A3362CD
sha3_384: 8b835c4001961929b414937edee4633d0e1f365a57cc431178c113d27a18045af8cb8395b0ed5d8ed3a80987452f2b39
ep_bytes: e8e15c0000e9a4feffff8bff558bec83
timestamp: 2012-07-13 22:47:16

Version Info:
Translation: 0x0000 0x04b0
Comments: Dev tool
CompanyName: Biohazard
FileDescription: METRO 2022 Dev
FileVersion: 5.1.1
InternalName: Shrivelled.exe
LegalCopyright: METRO Corp. 2022
OriginalFilename: Shrivelled.exe
ProductName: 
ProductVersion: 5.1.1
Assembly Version: 41.11.2.0

Malware.AI.3925265530 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
McAfee	Artemis!A65F488695F0
Malwarebytes	Malware.AI.3925265530
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
Kaspersky	VHO:Trojan-PSW.MSIL.Convagent.gen
BitDefender	Gen:Variant.Zusy.479996
MicroWorld-eScan	Gen:Variant.Zusy.479996
Avast	Win32:Evo-gen [Trj]
Emsisoft	Gen:Variant.Zusy.479996 (B)
VIPRE	Gen:Variant.Zusy.479996
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.fz
FireEye	Generic.mg.a65f488695f0f4f5
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.MSIL.Spy
Antiy-AVL	Trojan/Script.Phonzy
Arcabit	Trojan.Zusy.D752FC
ZoneAlarm	VHO:Trojan-PSW.MSIL.Convagent.gen
GData	Gen:Variant.Zusy.479996
Google	Detected
AhnLab-V3	Trojan/Win.JB.R593530
ALYac	Gen:Variant.Zusy.479996
MAX	malware (ai score=84)
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:prA7VjGfAtgOnmK6hLu/3g)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.215594169.susgen
BitDefenderTheta	Gen:NN.ZexaF.36350.tq0@aGTk2Lk
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.7d0345
DeepInstinct	MALICIOUS

How to remove Malware.AI.3925265530?

Malware.AI.3925265530 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X