What is “MSILHeracles.32130”?

The MSILHeracles.32130 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.32130 virus can do?

Presents an Authenticode digital signature
Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSILHeracles.32130?


File Info:
name: F8C0BA3BA464C2C48F29.mlw
path: /opt/CAPEv2/storage/binaries/1a028fe43dbe149e9490a68eb153e54e3fb28e43a7d09e7b85c2ab6b8a66185b
crc32: A2CC97AD
md5: f8c0ba3ba464c2c48f29397af63b07f6
sha1: 41095d98f9a5aab5a2055292cf4576bfb87571f4
sha256: 1a028fe43dbe149e9490a68eb153e54e3fb28e43a7d09e7b85c2ab6b8a66185b
sha512: 73809e0b6af6775dee232c91fc8cc12263be592d35472352ed15e0e44492ba8a9b0559b2bd4893c60301f3c776e23bb1df54987b6d5b4d422617f4631d9ddfef
ssdeep: 24576:RsvWKqLStu8thXTFJssoPDfItMhfyVVSSlyBJmkkvlaNQvy1qScJDmdUbibH:RQWBLl8NuHfFyVVSSSKvla6CcJ6dvD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B66523E5A105BF66CF091E3D40D41AFD0A20BE25D1B1CA9E76DB31F569BC26344B8B0E
sha3_384: 1a0ad7f2740667998c3a022c6458dfc688aa8fe085aaaacc35d42b5de06ac7bb3a5739842115366e83b5b182ab52fb07
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-07 11:24:29

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: Terragene
FileDescription: Bionova Cloud Agent
FileVersion: 0.1.2.04
InternalName: Bionova Cloud Agent.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Bionova Cloud Agent.exe
ProductName: Bionova Cloud Agent
ProductVersion: 0.1.2.04
Assembly Version: 0.1.2.4

MSILHeracles.32130 also known as:

Lionic	Trojan.Win32.Heracles.4!c
MicroWorld-eScan	Gen:Variant.MSILHeracles.32130
FireEye	Gen:Variant.MSILHeracles.32130
McAfee	Artemis!F8C0BA3BA464
Cybereason	malicious.8f9a5a
BitDefenderTheta	Gen:NN.ZemsilF.34084.An1@aW9fbmb
TrendMicro-HouseCall	TROJ_GEN.R002H09LA21
BitDefender	Gen:Variant.MSILHeracles.32130
Ad-Aware	Gen:Variant.MSILHeracles.32130
SentinelOne	Static AI – Suspicious PE
Emsisoft	Gen:Variant.MSILHeracles.32130 (B)
GData	Gen:Variant.MSILHeracles.32130
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.MSILHeracles.D7D82
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ALYac	Gen:Variant.MSILHeracles.32130
MAX	malware (ai score=80)
Malwarebytes	MachineLearning/Anomalous.100%
MaxSecure	Trojan.Malware.300983.susgen

How to remove MSILHeracles.32130?

MSILHeracles.32130 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X