Categories: Malware

Should I remove “MSILHeracles.13189”?

The MSILHeracles.13189 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSILHeracles.13189 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
CAPE detected the ShellcodeDLEI malware family
Binary compilation timestomping detected

How to determine MSILHeracles.13189?


File Info:
name: 7300F8FB638736C9AD07.mlwpath: /opt/CAPEv2/storage/binaries/d795190b74a1fd5df45ea0646e85850222eb1d7260400eebef441ad0b959904fcrc32: 2055AA4Bmd5: 7300f8fb638736c9ad07b2e51289ba06sha1: 1475e57c4ce2dab39311d22d84b59bfee772da6bsha256: d795190b74a1fd5df45ea0646e85850222eb1d7260400eebef441ad0b959904fsha512: 4480291df87bb0e52defc960f63c8bb5144e118af47793c632f5dcddc8e5c9782c841d4951f5d5cf707f696ff6f5978ed1aa45860064c39455aadf8cb6fda63assdeep: 768:7wTryjwINCA7fvh8oY0H0IWBu+vnSPk3ejeqBt:7bjwINCInhJRWA+vnSw+Jbtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T134038405A3E94501F2FFBF38997205204B7B78969E35C74E5A9C406E1F3BB958D20BA3sha3_384: c6af9527ab853df0327518351dc6c7c4aa6cd033ec31bc8d5ab234ca7430f43fac41e6e29329c506dad9736fb3de99a2ep_bytes: ff250020400001020304050607080000timestamp: 2045-06-22 02:00:20
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: ProcessInjectionFileVersion: 1.0.0.0InternalName: ProcessInjection.exeLegalCopyright: Copyright ©  2019LegalTrademarks: OriginalFilename: ProcessInjection.exeProductName: ProcessInjectionProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

MSILHeracles.13189 also known as:

Lionic	Trojan.Win32.Heracles.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILHeracles.13189
ALYac	Gen:Variant.MSILHeracles.13189
Cylance	Unsafe
Zillya	Trojan.ShellcodeRunner.Win32.129
Sangfor	Trojan.Win32.Sabsik.FL
K7AntiVirus	Trojan ( 005786e01 )
Alibaba	Trojan:MSIL/ShellcodeRunner.3ae3b73f
K7GW	Trojan ( 005786e01 )
Cybereason	malicious.b63873
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/ShellcodeRunner.N
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.ShellLoader-9790773-0
BitDefender	Gen:Variant.MSILHeracles.13189
Avast	Win32:MalwareX-gen [Trj]
Tencent	Msil.Trojan.Msilheracles.Adtw
Ad-Aware	Gen:Variant.MSILHeracles.13189
Sophos	Mal/Generic-R + Mal/MsilInj-F
F-Secure	Heuristic.HEUR/AGEN.1144813
TrendMicro	TROJ_GEN.R002C0RAH22
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.7300f8fb638736c9
Emsisoft	Gen:Variant.MSILHeracles.13189 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.MSILHeracles.13189
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1144813
Antiy-AVL	Trojan/MSIL.ShellcodeRunner
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.MSILHeracles.D3385
Microsoft	Trojan:Win32/Tiggre!rfn
AhnLab-V3	Trojan/Win.Generic.C4560305
McAfee	Artemis!7300F8FB6387
MAX	malware (ai score=82)
Malwarebytes	Trojan.ShellCode
TrendMicro-HouseCall	TROJ_GEN.R002C0RAH22
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:oIgiS1dS6BqKzzPsJN06zQ)
Yandex	Trojan.ShellcodeRunner!AstY7ziwZ6w
Ikarus	Trojan.MSIL.Shellcoderunner
Fortinet	MSIL/ShellcodeRunner.N!tr
BitDefenderTheta	Gen:NN.ZemsilF.34160.cm0@aSo5ZJd
AVG	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (W)