MSILHeracles.61452 malicious file

The MSILHeracles.61452 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.61452 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine MSILHeracles.61452?


File Info:
name: 9C222D95C2D564F292E1.mlw
path: /opt/CAPEv2/storage/binaries/3a86d37baee2dcd6a563624a4d409a0564d00a0fe3b8fe8676bf0dff3107c630
crc32: B37A664A
md5: 9c222d95c2d564f292e1893e8dafb5bc
sha1: d7af6790319adc99d106b39e0f2c054fc957cd96
sha256: 3a86d37baee2dcd6a563624a4d409a0564d00a0fe3b8fe8676bf0dff3107c630
sha512: 120878b6b20afed1b172b6640420246f47d6f86720d0a741aa72d107a3dec36d40842eac8a889c9d9d219d2c67c5654384f156d3a6684853ec6bef8058ce19b2
ssdeep: 192:afE/3PkjkFTBSifLeSOs1ThsVcCVFckTwTmxOQadkXtTPLt:acFBSifLePg1sVJpTwTmxOtKXtTPLt
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T18552D82AAB98C913C67B9331A7B2D604D5B691030592CF1FBDDCA5C61F7330412A2FD8
sha3_384: 9c33bc16e586adbe00a5fd3c63b68c15dd93978004f2135e22278789ed4fc977b19886ad197781f05668971631fba5ed
ep_bytes: ff250020001000000000000000000000
timestamp: 2024-04-04 05:57:17

Version Info:
0: [No Data]

MSILHeracles.61452 also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	malicious (high confidence)
DrWeb	BackDoor.WebshellNET.9
MicroWorld-eScan	Gen:Variant.MSILHeracles.61452
FireEye	Gen:Variant.MSILHeracles.61452
Skyhigh	GenericRXWN-NY!9C222D95C2D5
ALYac	Gen:Variant.MSILHeracles.61452
Malwarebytes	Trojan.WebShell
Zillya	Trojan.Webshell.Win32.16464
K7GW	Trojan ( 005b19ee1 )
K7AntiVirus	Trojan ( 005b19ee1 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Webshell.EV
Kaspersky	HEUR:Backdoor.MSIL.WebShell.gen
BitDefender	Gen:Variant.MSILHeracles.61452
Avast	Win32:BackdoorX-gen [Trj]
Emsisoft	Gen:Variant.MSILHeracles.61452 (B)
F-Secure	Trojan.TR/Dropper.MSIL.Gen
VIPRE	Gen:Variant.MSILHeracles.61452
TrendMicro	TROJ_GEN.R011C0DD524
Ikarus	Win32.Outbreak
Google	Detected
Avira	TR/Dropper.MSIL.Gen
Arcabit	Trojan.MSILHeracles.DF00C
ZoneAlarm	HEUR:Backdoor.MSIL.WebShell.gen
GData	MSIL.Trojan.PSE.14W6LGL
Varist	W32/WebShell.E.gen!Eldorado
AhnLab-V3	Backdoor/Win.WEBSHELL.C5557106
McAfee	GenericRXWN-NY!9C222D95C2D5
MAX	malware (ai score=82)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R011C0DD524
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Webshell.EE!tr
AVG	Win32:BackdoorX-gen [Trj]

How to remove MSILHeracles.61452?

MSILHeracles.61452 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X