IL:Trojan.MSILZilla.10411 (B) malicious file

The IL:Trojan.MSILZilla.10411 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.10411 (B) virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics

How to determine IL:Trojan.MSILZilla.10411 (B)?


File Info:
name: EE5B3227094E133860BB.mlw
path: /opt/CAPEv2/storage/binaries/415d3dd440a511bcbd4d80efee58a12b944d46cebc2fc1eace0d145eaee1d38d
crc32: E0942518
md5: ee5b3227094e133860bb3942f0e930c1
sha1: 5314572dc9f4e6a9c03276c4aca2b39a0ce2e0ac
sha256: 415d3dd440a511bcbd4d80efee58a12b944d46cebc2fc1eace0d145eaee1d38d
sha512: 710dbc6349ea056514a69e9ce679a81a109e886418f68315cfddd0079ac7cd3395eccdbfd8f29a51cb272cb93d9fec01cca213b19626ee20dc09343db0563c0a
ssdeep: 49152:dFalz2xTfEumaIrjTDCAGCL1gKBrhu0yT29r2gigWlMWrX3:ylz2xTfErgKhd
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T19176603C3DAA1237E2BADFF5C9D9684AF756666736016C8D2C82034645E3743AEC052F
sha3_384: ac2e7b1b14f2ba77104ba2b1c7df9a0188794d14e40483c94b02713370232fd0c0d223554d34434648f32c711fbb5315
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2021-11-16 09:34:57

Version Info:
Translation: 0x0000 0x04b0
Comments: Runtime Broker
FileDescription: Runtime Broker
FileVersion: 15.66.76.98
InternalName: 4b477477-4ea9-1752-9e6d-5792c26882b6.exe
LegalCopyright: Runtime Broker
OriginalFilename: 4b477477-4ea9-1752-9e6d-5792c26882b6.exe
ProductName: Runtime Broker
ProductVersion: 15.66.76.98
Assembly Version: 15.66.76.98

IL:Trojan.MSILZilla.10411 (B) also known as:

Lionic	Trojan.MSIL.Agent.4!c
MicroWorld-eScan	IL:Trojan.MSILZilla.10411
FireEye	IL:Trojan.MSILZilla.10411
ALYac	IL:Trojan.MSILZilla.10411
Cylance	Unsafe
Sangfor	Trojan.MSIL.Agent.gen
K7AntiVirus	Trojan ( 0057e1471 )
Alibaba	Trojan:MSIL/GenKryptik.83596317
K7GW	Trojan ( 0057e1471 )
Cybereason	malicious.dc9f4e
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/GenKryptik.FGOD
TrendMicro-HouseCall	TROJ_GEN.R002H0DKG21
Kaspersky	HEUR:Trojan.MSIL.Agent.gen
BitDefender	IL:Trojan.MSILZilla.10411
Avast	Win64:CrypterX-gen [Trj]
Ad-Aware	IL:Trojan.MSILZilla.10411
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1142407
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	IL:Trojan.MSILZilla.10411 (B)
APEX	Malicious
GData	Win64.Trojan.Agent.KVNVM2
Avira	HEUR/AGEN.1142407
Gridinsoft	Ransom.Win64.Sabsik.sa
Arcabit	IL:Trojan.MSILZilla.D28AB
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
McAfee	Artemis!EE5B3227094E
MAX	malware (ai score=86)
Ikarus	Trojan.MSIL.Krypt
Fortinet	MSIL/GenKryptik.FGOD!tr
AVG	Win64:CrypterX-gen [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_60% (W)

How to remove IL:Trojan.MSILZilla.10411 (B)?

IL:Trojan.MSILZilla.10411 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X