Malware

MSILHeracles.17393 malicious file

Malware Removal

The MSILHeracles.17393 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSILHeracles.17393 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine MSILHeracles.17393?


File Info:

name: 82C5960DD3D4A0299F5C.mlw
path: /opt/CAPEv2/storage/binaries/5dfb2a9a3f8a6835d54086a994b9e75e2da19e30353500c2bfaeb6518329ac77
crc32: 79D1C308
md5: 82c5960dd3d4a0299f5ce9c011db2346
sha1: 8eb91f798bb20003ada0e77ade23d6f46e7dbb74
sha256: 5dfb2a9a3f8a6835d54086a994b9e75e2da19e30353500c2bfaeb6518329ac77
sha512: 6a8650c7c0e7e6181b8cad3dfb702c870cae4554fe48c874ec062c6be0c96debb6189e248c91817aeff89a9959ba58bc5f88c89737e1ef8a771d1c0aa1285f4f
ssdeep: 6144:deHEkDrtz7oFmG4Go8VjiUhuErESV+PEtptzXF6hJnsdRV:3uElr8zU7
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1C8245EEB23E38E53D978D63A50774B88A375C21CEAC2A777790D63FBED953284812111
sha3_384: 174b61f2e2b9ebfa7ab88ca9002a41dd7fe30a3ede5cb268239bfcc613e849cb5c0a64c27b6ff431b7e6712b1ecb8670
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-01-13 12:43:29

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName: Vanity Premium
FileDescription:
FileVersion: 1.0.0.0
InternalName: Microsoft Edge.exe
LegalCopyright: Copyright © Vanity Premium
LegalTrademarks: Vanity Premium
OriginalFilename: Microsoft Edge.exe
ProductName: HWID (Sp00fer)
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSILHeracles.17393 also known as:

LionicTrojan.MSIL.Agent.l!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.MSILHeracles.17393
FireEyeGeneric.mg.82c5960dd3d4a029
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
McAfeeGenericRXOY-JW!82C5960DD3D4
CylanceUnsafe
ZillyaTrojan.Agent.Win32.2074343
SangforTrojan.MSIL.Agent.gen
AlibabaBackdoor:MSIL/Bladabindi.d3c42f92
Cybereasonmalicious.dd3d4a
BitDefenderThetaGen:NN.ZemsilF.34062.nm0@aW5ALVg
SymantecML.Attribute.HighConfidence
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.MSILHeracles.17393
NANO-AntivirusTrojan.Win32.Bulz.ivntiw
AvastWin32:MalwareX-gen [Trj]
TencentMsil.Trojan-spy.Agent.Eawz
Ad-AwareGen:Variant.MSILHeracles.17393
EmsisoftGen:Variant.MSILHeracles.17393 (B)
McAfee-GW-EditionGenericRXOY-JW!82C5960DD3D4
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.MSILHeracles.17393
JiangminTrojan.MSIL.NetWire.b
AviraHEUR/AGEN.1143721
MAXmalware (ai score=83)
Antiy-AVLTrojan/Generic.ASMalwS.3319508
MicrosoftBackdoor:MSIL/Bladabindi!MTB
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.Generic.C4474295
VBA32TScope.Trojan.MSIL
ALYacGen:Variant.MSILHeracles.17393
MalwarebytesTrojan.Crypt.MSIL
APEXMalicious
YandexTrojanSpy.Agent!AWjUNAM8Mso
IkarusTrojan.MSIL.CryptoObfuscator
eGambitUnsafe.AI_Score_88%
FortinetW32/Agent!tr
WebrootW32.Trojan.Agent.Gen
AVGWin32:MalwareX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove MSILHeracles.17393?

MSILHeracles.17393 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment