IL:Trojan.MSILZilla.10412 (file analysis)

The IL:Trojan.MSILZilla.10412 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.10412 virus can do?

• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is likely packed with VMProtect
• Authenticode signature is invalid
• Anomalous .NET characteristics
• Binary compilation timestomping detected
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine IL:Trojan.MSILZilla.10412?

File Info:
name: F12CC13D2F473111D3A0.mlw
path: /opt/CAPEv2/storage/binaries/e8f6aa4de894007f6ff3cc7f9dd974b1636aa2092238c994e0ee573863678559
crc32: 4612401C
md5: f12cc13d2f473111d3a092e13873612e
sha1: f481178235b9297581806e7a893b1b0b88603471
sha256: e8f6aa4de894007f6ff3cc7f9dd974b1636aa2092238c994e0ee573863678559
sha512: 63e7984c677535c9b49130ee8820e792672b9af51249acc8a8a69a6558d8611a5d649d038f20d3e8934316e18c91b8658a54291245b3bb586865d6431e84f552
ssdeep: 3072:HoDGGnTstFBxhnOl5Nvntt/ctMshm1LBGczqEEQDRRp8mZl4KzXQY0oDoLdnZ+eg:HkstFDu7vXP4QuopXqKzXQYv0LDHFu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T100246CFD3FD85DF5C78953B150E6F2B261F0A2302043CBAE163699B55F862D27E0825A
sha3_384: 964401fa2ca46260c4ec8fd22ebf9004131d9437c9e6d65df150e0ddc28bc13f842bea8df3775a234d0121c38986782a
ep_bytes: ff250020400000000000000000000000
timestamp: 2058-12-27 06:36:24

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: ͏.exe
LegalCopyright:  
OriginalFilename: ͏.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

IL:Trojan.MSILZilla.10412 also known as:

How to remove IL:Trojan.MSILZilla.10412?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.