Win32/GameHack.FTY potentially unsafe information

The Win32/GameHack.FTY potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GameHack.FTY potentially unsafe virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/GameHack.FTY potentially unsafe?


File Info:
name: C12FFE68F4FB6532E004.mlw
path: /opt/CAPEv2/storage/binaries/a29bb286e486caafef56729d518b4398de7778f924ecafc96e8cb468eb6565d2
crc32: 00D5B642
md5: c12ffe68f4fb6532e004ae864d1e11be
sha1: 0a47d9acb6f110fe0825470f6c02f2e8ff90d9df
sha256: a29bb286e486caafef56729d518b4398de7778f924ecafc96e8cb468eb6565d2
sha512: 9920d7cc055ae206da8a46831275575861157655181c5b121dc1ba08e2d51c2d08485d7656ce2db8920b69b01e1c0b5d47f94e2550a67729ba76bc04c1257869
ssdeep: 24576:DqDEvCTbMWu7rQYlBQcBiT6rprG8aYEf40vD4lh6s9x1a7xI:DTvC/MTQYxsWR7aY6Lv8lgsrE7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C565CF0273918022FF9B92334B5AF61156BD6E260123E61F13983DB9BE705B1563E7A3
sha3_384: 1a53b4e9c968ecb8f1755e8962af2ad883e5da1ba9bd0ea7fccc693cd266c6faf2f85d5ab897c66cd01ec311c7e1baf5
ep_bytes: e86e050000e97afeffff558bec56ff75
timestamp: 2023-09-22 16:47:32

Version Info:
Translation: 0x0809 0x04b0

Win32/GameHack.FTY potentially unsafe also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win64.Injects.ts93
Skyhigh	BehavesLike.Win32.Generic.tc
McAfee	Artemis!C12FFE68F4FB
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
BitDefenderTheta	Gen:NN.ZexaF.36680.wvW@aea2m6hi
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GameHack.FTY potentially unsafe
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Script.awbz
Google	Detected
VBA32	Trojan.Autoit.Injcrypt
Cylance	unsafe
Panda	Trj/Genetic.gen
Ikarus	Trojan.Win32.Malgent
MaxSecure	Trojan.Malware.216064600.susgen
Fortinet	W32/PossibleThreat
Cybereason	malicious.cb6f11
DeepInstinct	MALICIOUS

How to remove Win32/GameHack.FTY potentially unsafe?

Win32/GameHack.FTY potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X