How to remove “MSILHeracles.47277”?

The MSILHeracles.47277 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.47277 virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSILHeracles.47277?


File Info:
name: AF58B5309C75387887E5.mlw
path: /opt/CAPEv2/storage/binaries/515f31161cd524020a36c3d9852f55142da71f18b9ec299315ddde1e96ba14ca
crc32: 5392E490
md5: af58b5309c75387887e5c94325a60204
sha1: a0b1c876fbb8276f22efece053509982fa155bd1
sha256: 515f31161cd524020a36c3d9852f55142da71f18b9ec299315ddde1e96ba14ca
sha512: 5cafeb86e8064c4c39feeb7234b332d78df22ea795f21dd9dda96084b8477b4fd0ad9241abda4345ee93b04d1faab260fe25dd3fd7008122a7bab1eed7c6d305
ssdeep: 12288:1aUUTKKhUu8eO3IG3+F7ZFo+1qognAWIQmBAPLJF9QBxFD:1hzKhUu9e+7kQq3AWIQmWJFqBDD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17FF44A09B5845E7AC9543DB7C3D61064DBF8E0CDF62AC286CD8C9BEC166A3567A07C38
sha3_384: ffc5097aec8fbc90dca3e3e94b3a149e2fc22be4de8a5ed7219d8ae773fa6dd9f1a7a306f1345621fe486cf4ea2e7d7b
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-11-17 07:38:08

Version Info:
Translation: 0x0000 0x04b0
FileDescription: CALLER THEAM
FileVersion: 1.0.0.0
InternalName: CALLER THEAM.exe
LegalCopyright: Copyright ©  2022
OriginalFilename: CALLER THEAM.exe
ProductName: CALLER THEAM
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSILHeracles.47277 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILHeracles.47277
FireEye	Generic.mg.af58b5309c753878
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005471f01 )
K7GW	Trojan ( 005471f01 )
Cybereason	malicious.6fbb82
BitDefenderTheta	Gen:NN.ZemsilF.34796.Sm0@ayBog5c
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.QPG
TrendMicro-HouseCall	TROJ_GEN.R014H0CKH22
Kaspersky	HEUR:Backdoor.MSIL.Bladabindi.gen
BitDefender	Gen:Variant.MSILHeracles.47277
Cynet	Malicious (score: 99)
Avast	Win32:Trojan-gen
Ad-Aware	Gen:Variant.MSILHeracles.47277
Emsisoft	Gen:Variant.MSILHeracles.47277 (B)
DrWeb	BackDoor.Bladabindi.16104
VIPRE	Gen:Variant.MSILHeracles.47277
SentinelOne	Static AI – Suspicious PE
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
APEX	Malicious
GData	Gen:Variant.MSILHeracles.47277
Avira	HEUR/AGEN.1235680
Arcabit	Trojan.MSILHeracles.DB8AD
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
Acronis	suspicious
VBA32	Malware-Cryptor.MSIL.AgentTesla.Heur
ALYac	Gen:Variant.MSILHeracles.47277
MAX	malware (ai score=83)
Rising	Trojan.Generic/MSIL@AI.94 (RDM.MSIL:OG/frPgidR20fg/WY+DXEA)
Ikarus	Trojan.MSIL.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.RV!tr
AVG	Win32:Trojan-gen

How to remove MSILHeracles.47277?

MSILHeracles.47277 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X