Crack

HackTool.Agent.MSIL (file analysis)

Malware Removal

The HackTool.Agent.MSIL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool.Agent.MSIL virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine HackTool.Agent.MSIL?


File Info:

crc32: E237386F
md5: be94f0a2dd4f480e1a0d8bf72e6748ab
name: 17240901010001.exe
sha1: 9d306e66ed4c269a3919d449fe0e33b8f7ebde51
sha256: 046f9103365e7048332456b90f6f6a4e19361d70e11813afc80d807cedddbea7
sha512: 341da7c517cae0948ed2beeff9017cac261efd7d5fb154045b011de6cb53c09bac45ca4cdb2832305e22c20b827846b9986bdb5ddb69feafb2c5d016f8ffa56a
ssdeep: 192:F3x2JJImCqEUUM5pzMKf6Ip1GKs19oZXz0mGdSXjRbfKxK+:FKMtyMK6KUkDySXJKx7
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.0.0
InternalName: MemoryDiagnostic.exe
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: MemoryDiagnostic.exe

HackTool.Agent.MSIL also known as:

MicroWorld-eScanGen:Variant.Ursu.140489
McAfeeGenericRXGV-NG!BE94F0A2DD4F
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
K7AntiVirusTrojan ( 700000121 )
BitDefenderGen:Variant.Ursu.140489
K7GWTrojan ( 700000121 )
Cybereasonmalicious.2dd4f4
Invinceaheuristic
F-ProtW32/Trojan.SW.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:MSIL/KillProc.9cb22d7b
NANO-AntivirusTrojan.Win32.Fsysna.ejvuyg
AegisLabTrojan.Win32.Generic.4!c
AvastWin32:MalwareX-gen [Trj]
TencentWin32.Trojan.Generic.Pjdk
Ad-AwareGen:Variant.Ursu.140489
EmsisoftGen:Variant.Ursu.140489 (B)
ComodoMalware@#xc8mwj0sxev4
F-SecureHeuristic.HEUR/AGEN.1039855
DrWebTrojan.DownLoader26.5584
ZillyaTrojan.KillProc.Win32.7340
TrendMicroTROJ_GEN.R002C0PCR20
McAfee-GW-EditionGenericRXGV-NG!BE94F0A2DD4F
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.be94f0a2dd4f480e
SophosMal/Generic-S
SentinelOneDFI – Malicious PE
CyrenW32/Trojan.SW.gen!Eldorado
JiangminTrojan.Fsysna.flj
AviraHEUR/AGEN.1039855
FortinetMSIL/Generic.AP.5053C!tr
Antiy-AVLTrojan/Win32.Wacatac
Endgamemalicious (high confidence)
ArcabitTrojan.Ursu.D224C9
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Occamy.C
AhnLab-V3Trojan/Win32.Fsysna.C2619129
Acronissuspicious
BitDefenderThetaGen:NN.ZemsilF.34104.am0@aK1LZum
ALYacGen:Variant.Ursu.140489
MAXmalware (ai score=87)
VBA32Trojan.Downloader
MalwarebytesHackTool.Agent.MSIL
ESET-NOD32a variant of MSIL/KillProc.BG
TrendMicro-HouseCallTROJ_GEN.R002C0PCR20
RisingTrojan.KillProc!8.2A8 (CLOUD)
IkarusWin32.Outbreak
GDataGen:Variant.Ursu.140489
AVGWin32:MalwareX-gen [Trj]
CrowdStrikewin/malicious_confidence_80% (W)

How to remove HackTool.Agent.MSIL?

HackTool.Agent.MSIL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment