IL:Trojan.MSILZilla.10045 (file analysis)

The IL:Trojan.MSILZilla.10045 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.10045 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine IL:Trojan.MSILZilla.10045?


File Info:
name: 62BD7A65B3A96839190E.mlw
path: /opt/CAPEv2/storage/binaries/230f0b1110b05ecb3e415bd19e27985dd116597f9f5c37e5104a871f67b5d3d5
crc32: E376BAC0
md5: 62bd7a65b3a96839190eed48cffbc42a
sha1: 15411ca056f68258c9a0baeff174cfff1f76afc5
sha256: 230f0b1110b05ecb3e415bd19e27985dd116597f9f5c37e5104a871f67b5d3d5
sha512: b863ee89eb9a3f96857bd9b9b373c10ac5b800159684a1380918aa28ede9d67e8ee8a8da60c9f1eeea1572571f06e074bb2ac8e9b5dada469dae6d82a251d373
ssdeep: 768:hM4w72tgpFqCg+Vs8F2/4E3g/OX7asM0D:ufCeP+4FOX7nD
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1A9F25C0DBE42FD2AD97E0E79C4729019537180F61A93E78E7DD4EC912A933C806C26E7
sha3_384: e2f33b14f9df9bdb4a87ee37865c57f162db4b32081aa5ff83a029546e4d9d80f8d21ec179689871d48596464e99f737
ep_bytes: ff250020400000010203040608080000
timestamp: 2021-12-07 13:20:11

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: output.exe
LegalCopyright:  
OriginalFilename: output.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

IL:Trojan.MSILZilla.10045 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.31456
MicroWorld-eScan	IL:Trojan.MSILZilla.10045
FireEye	Generic.mg.62bd7a65b3a96839
ALYac	IL:Trojan.MSILZilla.10045
Cylance	Unsafe
Zillya	Trojan.Disco.Win32.3934
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34062.cm0@a4PDU4j
ESET-NOD32	a variant of MSIL/Spy.Agent.DJV
ClamAV	Win.Trojan.Bladbindi-1
Kaspersky	HEUR:Trojan-PSW.MSIL.Disco.gen
BitDefender	IL:Trojan.MSILZilla.10045
Avast	MSIL:GenMalicious-VH [Trj]
Ad-Aware	IL:Trojan.MSILZilla.10045
Sophos	ML/PE-A
McAfee-GW-Edition	PWS-FDEH!62BD7A65B3A9
SentinelOne	Static AI – Malicious PE
Emsisoft	IL:Trojan.MSILZilla.10045 (B)
Avira	HEUR/AGEN.1137455
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	IL:Trojan.MSILZilla.10045
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C4559113
McAfee	PWS-FDEH!62BD7A65B3A9
Malwarebytes	Malware.AI.1435123615
APEX	Malicious
MAX	malware (ai score=85)
AVG	MSIL:GenMalicious-VH [Trj]
Cybereason	malicious.056f68

How to remove IL:Trojan.MSILZilla.10045?

IL:Trojan.MSILZilla.10045 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X