MSIL/GameHack.ANH potentially unsafe removal tips

The MSIL/GameHack.ANH potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GameHack.ANH potentially unsafe virus can do?

Dynamic (imported) function loading detected
.NET file is packed/obfuscated with Confuser
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine MSIL/GameHack.ANH potentially unsafe?


File Info:
name: 0FA293A59E4CFC9815B0.mlw
path: /opt/CAPEv2/storage/binaries/5c6821679291126786734f361bb46e1d0e00adf0d537bf336eeb63d3b1aaac12
crc32: 6FB817C0
md5: 0fa293a59e4cfc9815b03fcb75ac1260
sha1: 20c40cfc4992e328fdd5d544c04818dd274fec28
sha256: 5c6821679291126786734f361bb46e1d0e00adf0d537bf336eeb63d3b1aaac12
sha512: 592257d997d0ad4b65dd50737a536b9dfbda518773c7451e9fa9dc7f0707a7d8abafee1e1b68c1f5aef2333fde1c2ea770a6ba1c9d753669751c8ca35e39aac4
ssdeep: 49152:aI+2tcX0On2vOKSVDcROn2vOKSVDcOH26vkPcdcEY8KVxkEZiH:aI+2Ybn2viFzn2viFBW4FaEHEU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T104E512E67736ED19CB284D7CE46ECDF465D87C418A70945B28E17C0B3DB261B8262F22
sha3_384: 8700fd99a24b935441826fc842318f15109c93902cd35670758df2a411f086c137315a2bd37a4009e46b6aed6c4538dc
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-05-05 06:31:23

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: ___.netmodule.exe
LegalCopyright:  
OriginalFilename: ___.netmodule.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

MSIL/GameHack.ANH potentially unsafe also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	Trojan.GenericKD.50257069
FireEye	Generic.mg.0fa293a59e4cfc98
ALYac	Trojan.GenericKD.50257069
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.c4992e
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/GameHack.ANH potentially unsafe
Paloalto	generic.ml
BitDefender	Trojan.GenericKD.50257069
Ad-Aware	Trojan.GenericKD.50257069
Emsisoft	Trojan.GenericKD.50257069 (B)
Sophos	Generic PUA CA (PUA)
GData	Trojan.GenericKD.50257069
MAX	malware (ai score=84)
Microsoft	Backdoor:Win32/Bladabindi!ml
TrendMicro-HouseCall	TROJ_GEN.R002H09E922
SentinelOne	Static AI – Suspicious PE
Fortinet	Adware/GameHack
BitDefenderTheta	Gen:NN.ZemsilCO.34638.ip0@aSFzCXm
CrowdStrike	win/malicious_confidence_70% (W)

How to remove MSIL/GameHack.ANH potentially unsafe?

MSIL/GameHack.ANH potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X