What is “MSIL/GameTool.CR potentially unsafe”?

The MSIL/GameTool.CR potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GameTool.CR potentially unsafe virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/GameTool.CR potentially unsafe?


File Info:
name: 73DB6A1D16F9739B89A3.mlw
path: /opt/CAPEv2/storage/binaries/af8b4c019d5cbfdcbbadcf6cb1152e09ea5a3c7d962e12a4ca7fad2ef0fd6523
crc32: 8F3968C6
md5: 73db6a1d16f9739b89a3683b85057f18
sha1: 5f00ef70d3bc9044eb40f31a19646f89a3ed35fd
sha256: af8b4c019d5cbfdcbbadcf6cb1152e09ea5a3c7d962e12a4ca7fad2ef0fd6523
sha512: ae5a8e15271016953649319ee610a0e5947ad022947a75e3751ab5c2c68da0b56b0ca972db211eeafc180390fc53ba37f230ba7e7b8f5d5536df84d72212f311
ssdeep: 24576:Xd936EGhhwEKdUiblI/6xF/xsWOKzclmVy1V3TFdm/uPLlik:Xn7QhwBdv+/kF/BO4wmU1dX3D
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CD5523D4DD789999DBFF6B328AE182000B2D521ECC16DB090AE525DCE9F72477B26343
sha3_384: 760677b1c9d6445822731dd7c71009e9ddb8b130193052f08bf2e61503912e4b61ba157d913289d66d89b8bdc5d87a71
ep_bytes: ff250020400000000000000000000000
timestamp: 2038-04-07 20:33:29

Version Info:
Translation: 0x0000 0x04b0
Comments: Anelia2 Patcher
CompanyName: Elendos
FileDescription: Anelia2 Patcher
FileVersion: 1.1.2.3
InternalName: Launcher.exe
LegalCopyright: Copyright © Anelia2 2022
LegalTrademarks: Anelia2
OriginalFilename: Launcher.exe
ProductName: Anelia2 Patcher
ProductVersion: 1.1.2.3
Assembly Version: 1.1.2.3

MSIL/GameTool.CR potentially unsafe also known as:

MicroWorld-eScan	Trojan.GenericKD.48179315
FireEye	Trojan.GenericKD.48179315
McAfee	Artemis!73DB6A1D16F9
ESET-NOD32	a variant of MSIL/GameTool.CR potentially unsafe
BitDefender	Trojan.GenericKD.48179315
Ad-Aware	Trojan.GenericKD.48179315
Emsisoft	Trojan.GenericKD.48179315 (B)
McAfee-GW-Edition	Artemis
GData	Trojan.GenericKD.48179315
MAX	malware (ai score=80)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ALYac	Trojan.GenericKD.48179315
Malwarebytes	MachineLearning/Anomalous.95%
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/GameTool

How to remove MSIL/GameTool.CR potentially unsafe?

MSIL/GameTool.CR potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X