IL:Trojan.MSILZilla.15051 (file analysis)

The IL:Trojan.MSILZilla.15051 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.15051 virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.15051?


File Info:
name: F56C7095DF8ACF28A75B.mlw
path: /opt/CAPEv2/storage/binaries/e16488642b33374db24b7a107b1c0145e30a1a594cab077b53fb198c6e047c3a
crc32: 922ABB27
md5: f56c7095df8acf28a75b5f4d94b5638f
sha1: 4f1477fa256a36fb65b1b1c30c4298bd7466e97f
sha256: e16488642b33374db24b7a107b1c0145e30a1a594cab077b53fb198c6e047c3a
sha512: 7aad6a8dc3de5ccd42071da36d4890bf78f089af9842cd5d41aa779c2bd30f550b998899d95932fcf54972413e74eface9b607fbcda7557057437793ab27835d
ssdeep: 98304:jiHbalWeWP84rAJzRrRl0gLIRfyC7egWJo56zvh9J9SGcq:MOM8WCrn0guhegPspf97
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EE86BF06F7579E5DD3531B3C9CA297BA29FABC312A3B8307AA056BC7D44A480CD9D344
sha3_384: 68d36e05d885e941fda069e8b074cfff9068de7c652ed60171019b7bebd2f4946e810a8f3b175faebe5b21d2b3eb25f9
ep_bytes: ff250020400000000000000000000000
timestamp: 2065-08-23 21:46:50

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: HP
FileDescription: SUSUI
FileVersion: 1.0.0.0
InternalName: SUSUI.exe
LegalCopyright: Copyright © HP 2022
LegalTrademarks: 
OriginalFilename: SUSUI.exe
ProductName: SUSUI
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.15051 also known as:

MicroWorld-eScan	IL:Trojan.MSILZilla.15051
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/DllInject.WV potentially unsafe
APEX	Malicious
BitDefender	IL:Trojan.MSILZilla.15051
Avast	Win32:MalwareX-gen [Trj]
Rising	PUA.DllInject!8.6CC (TFE:dGZlOg1bLn+h6RRJEg)
Ad-Aware	IL:Trojan.MSILZilla.15051
Emsisoft	IL:Trojan.MSILZilla.15051 (B)
VIPRE	IL:Trojan.MSILZilla.15051
FireEye	IL:Trojan.MSILZilla.15051
Sophos	Mal/MSIL-AX
GData	IL:Trojan.MSILZilla.15051
Google	Detected
Arcabit	IL:Trojan.MSILZilla.D3ACB
Microsoft	Trojan:Script/Wacatac.H!ml
ALYac	IL:Trojan.MSILZilla.15051
MAX	malware (ai score=85)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/GameHack
AVG	Win32:MalwareX-gen [Trj]

How to remove IL:Trojan.MSILZilla.15051?

IL:Trojan.MSILZilla.15051 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X