MSIL/GameTool.DM potentially unsafe (file analysis)

The MSIL/GameTool.DM potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GameTool.DM potentially unsafe virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSIL/GameTool.DM potentially unsafe?


File Info:
name: B18015A7711FAA4EFAE2.mlw
path: /opt/CAPEv2/storage/binaries/ba86c4735fe84f456981c3d265784e73ac1e49895ec389c85141ada8e1ad2805
crc32: B9044335
md5: b18015a7711faa4efae28cfaa06f1ede
sha1: cb17968ad2d2e3d135959e34f3961127ca785b43
sha256: ba86c4735fe84f456981c3d265784e73ac1e49895ec389c85141ada8e1ad2805
sha512: d2a5a347e05f48b699895e6610005c67344864b8dca0aa4a7b0d7f949b32fad3d2bdd281ac7131ec8461a4dc5105a52b341a422fc2689c3a0ef5e1faa36dba27
ssdeep: 49152:W0z52JfHYyHZpu9rFRgodMlOsyzsEFw/dtyhy:W0kS6e9rUodYTT//Q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T125B52258B691CE54E55B3AF4E8B5C180467EBE500276C60732BC391EEB772A7CE0219E
sha3_384: eee28ae4cd61c5bccc0d533bff08b8169ed33e91f2e326500b225445d3af3cdf02eff725377829752864eb9723f0f675
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-10 14:57:02

Version Info:
Translation: 0x0000 0x04b0
Comments: Launcher pour lancer le jeu snkae
CompanyName: Sneke production
FileDescription: Launcher
FileVersion: 1.0.0
InternalName: Uplauncher.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Uplauncher.exe
ProductName: Uplauncher.Properties
ProductVersion: 1.0.0
Assembly Version: 1.0.0.0

MSIL/GameTool.DM potentially unsafe also known as:

Lionic	Trojan.MSIL.Agent.a!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.38247415
FireEye	Trojan.GenericKD.38247415
ALYac	Trojan.GenericKD.38247415
Cylance	Unsafe
K7AntiVirus	Unwanted-Program ( 0058baff1 )
K7GW	Unwanted-Program ( 0058baff1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/GameTool.DM potentially unsafe
TrendMicro-HouseCall	TROJ_GEN.R002C0PLD21
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan-Downloader.MSIL.Agent.gen
BitDefender	Trojan.GenericKD.38247415
Tencent	Malware.Win32.Gencirc.11dbbc08
Ad-Aware	Trojan.GenericKD.38247415
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R002C0PLD21
McAfee-GW-Edition	GenericRXQX-FR!B18015A7711F
Emsisoft	Trojan.GenericKD.38247415 (B)
GData	Trojan.GenericKD.38247415
Antiy-AVL	Trojan/Generic.ASMalwS.34E90D9
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Malware/Win32.RL_Generic.C4304839
McAfee	GenericRXQX-FR!B18015A7711F
MAX	malware (ai score=82)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.1912316275
APEX	Malicious
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/GameTool
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/GdSda.A

How to remove MSIL/GameTool.DM potentially unsafe?

MSIL/GameTool.DM potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X