Possible FP seen in 2 malware removal cases so far

[Porthos]

https://forums.malwarebytes.com/topic/261952-malware-bytes-removed-this-but-i-need-to-know-where-it-came-from/?tab=comments#comment-1395615

 

https://forums.malwarebytes.com/topic/261947-malware-bytes-removed-this-but-i-need-to-know-where-it-came-from/?tab=comments#comment-1395624

 

 

Registry Key: 0
(No malicious items detected)

Registry Value: 1
Malware.AI.853400141, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\WINDOWS\SYSTEM32\SLOTMAXIMIZERBE.DLL, Quarantined, 1000000, 0, , , ,

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Malware.AI.853400141, C:\WINDOWS\SYSTEM32\SLOTMAXIMIZERBE.DLL, Quarantined, 1000000, 0, 1.0.27081, 1C28C237A168FCE032DDDA4D, dds, 00815297

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[Atribune]

Could you please request the actual sample ?

 

[Porthos]

6 minutes ago, Atribune said:

Could you please request the actual sample ?

 

I am not working the cases just noticed there was 2 already and saw it was "Malware.AI." so I posted here to head off the issue.

[Atribune]

 

All good, thanks for sharing, I've requested the sample.

[Liss]

I googled that \SLOTMAXIMIZERBE.DLL   and that is a vanity bitcoin generator/theft miner