Malware.AI.3994406428 (file analysis)

The Malware.AI.3994406428 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.3994406428 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Reads data out of its own binary image
Authenticode signature is invalid
Deletes executed files from disk

How to determine Malware.AI.3994406428?


File Info:
name: FA4F3AB28A6946273260.mlw
path: /opt/CAPEv2/storage/binaries/590226be5cbb76e6ebfda2534e17143f867328c85b82ebf902aa8eb6372970ac
crc32: 459B4B26
md5: fa4f3ab28a6946273260609287706511
sha1: d873d98df7a6c1c637efd75f59ebd706f537307d
sha256: 590226be5cbb76e6ebfda2534e17143f867328c85b82ebf902aa8eb6372970ac
sha512: ce0a24508a713b8860853f6ff766f981d46a8c6ccb8705113465a2d1eedbff36865687568f2b610ec737f2c4b5da220d4846a36b8d9f5b27682fa623a22bf381
ssdeep: 12288:ftob+0MkYhal9+KG/Bppqh/aieelXsWT5B32ccdkRTNk9tCT86NZY1VAVYb3vYu/:ft5SYUl9+fBDY/3eQXsWHpjRJUwETY63
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19715018C464E58F5FEAB9C30B982E71D9B68D838CD774D55E4F3082AC9B3D58A735208
sha3_384: a8238782563305ed9678e86ea3eaa16b87fd83de4d32348e8108daeb1e93cd829613ccb1915ca8f701ba34878f16b3c1
ep_bytes: 5589e557565381ecac010000ff157493
timestamp: 2012-02-19 15:01:49

Version Info:
CompanyName: Slots Heaven
FileDescription: Slots Heaven Installer
FileVersion: 1.1.1.32
LegalCopyright: Copyright 2014
ProductName: Slots Heaven
Translation: 0x0409 0x0000

Malware.AI.3994406428 also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
Skyhigh	Playtech
McAfee	Playtech
K7AntiVirus	Adware ( 005293511 )
K7GW	Adware ( 005293511 )
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/PlayTech.A potentially unwanted
SUPERAntiSpyware	PUP.PlayTech/Variant
Emsisoft	Application.Generic (A)
Trapmine	malicious.moderate.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Antiy-AVL	GrayWare/Win32.Presenoker
Cynet	Malicious (score: 100)
VBA32	BScope.Trojan.Crossrider
Malwarebytes	Malware.AI.3994406428
Rising	PUF.PlayTech!1.B889 (CLASSIC)
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (D)

How to remove Malware.AI.3994406428?

Malware.AI.3994406428 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X