MSILHeracles.39264 removal

The MSILHeracles.39264 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.39264 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with Confuser
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSILHeracles.39264?


File Info:
name: B6E3F5C8F1308C1A735E.mlw
path: /opt/CAPEv2/storage/binaries/9c9556e168f957d400cece5bf8a7776945656f20c63b780bf1a536ac84db1379
crc32: 764D112A
md5: b6e3f5c8f1308c1a735ecde638ae2498
sha1: e96c4392d8e5965cf0bdb13dac6a56e0dadcb1a0
sha256: 9c9556e168f957d400cece5bf8a7776945656f20c63b780bf1a536ac84db1379
sha512: 40706b2bbf9039a29b1ae69d33f801460c1019be0486edfdc13de5490b8d4d80133aae587243b38fb505f30220f1771bdd6b300db32a220ded94c0cd7547547a
ssdeep: 3072:UOVOQWsDcus/ZtjMwbc9UGtfECiRmTcFGAwtFR8FHtKk0aOOOTtPAVNADuR:UObE/ZtjMwbc1EnRqcxbFH//F
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AB147CAEB79FCE67CA1A06375061C43D0272D9234A93E77778DC2F9A5E76398051308E
sha3_384: 12a59be422027a88d23aa9ada8b08d8a4ff7dc5cd5c7dea80c50e7dfbe294a3d032911965f3f2c15f1a109308f0794ee
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-07-17 17:24:49

Version Info:
Translation: 0x0000 0x04b0
Comments: You need to use this software first to get lasted and stale version of SuperDiag
CompanyName: SuperDiag
FileDescription: SuperDiagLauncher
FileVersion: 1.0.0.0
InternalName: SuperDiagUpdater.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: SuperDiag
OriginalFilename: SuperDiagUpdater.exe
ProductName: SuperDiagLauncher
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSILHeracles.39264 also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	Gen:Variant.MSILHeracles.39264
FireEye	Generic.mg.b6e3f5c8f1308c1a
ALYac	Gen:Variant.MSILHeracles.39264
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.2d8e59
BitDefenderTheta	Gen:NN.ZemsilF.34786.mm0@a8g7G9n
Cyren	W32/MSIL_Agent.DJL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
BitDefender	Gen:Variant.MSILHeracles.39264
Avast	Win32:DropperX-gen [Drp]
Ad-Aware	Gen:Variant.MSILHeracles.39264
Sophos	Generic ML PUA (PUA)
VIPRE	Gen:Variant.MSILHeracles.39264
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.MSILHeracles.39264 (B)
GData	Gen:Variant.MSILHeracles.39264
Avira	HEUR/AGEN.1227343
Antiy-AVL	Trojan/Generic.ASBOL.38BB
Arcabit	Trojan.MSILHeracles.D9960
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.C3518405
Acronis	suspicious
MAX	malware (ai score=88)
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.90 (RDM.MSIL:zQWWqIhjitfab4yvqpX/FQ)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_60% (D)

How to remove MSILHeracles.39264?

MSILHeracles.39264 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X