About “MSILHeracles.92481” infection

The MSILHeracles.92481 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.92481 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine MSILHeracles.92481?


File Info:
name: 46E998003F4E37C7BCCB.mlw
path: /opt/CAPEv2/storage/binaries/a9f368355ff22df9625e4ba3144d79f17a8fd8eaf3d85af2207c57ceb5714cc5
crc32: 614401B4
md5: 46e998003f4e37c7bccbce3a0fc18cd3
sha1: f2ab490e83f5cc8c1fbfc4d910f502bed63f5496
sha256: a9f368355ff22df9625e4ba3144d79f17a8fd8eaf3d85af2207c57ceb5714cc5
sha512: 17c7a4979acb689cf858147ba678ea9352672f5f622d241409719fe0cf9cc41a0c5e779d9276974ab0d0884b77bd50928f810fc2990c104cfe9bcb5fcc0bd45e
ssdeep: 384:Iqb6WPwyfLeML1gbqiTPLt4TwTmxOtKX7Lt:JuOfLDpMdXeMKxOtKn
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T12462C51AABD8CD13C7BB973657B69604D47699030652CB0EBEECA5CA1F733044262FC8
sha3_384: 5f7c255ea2b5096e0ca7fc704b79f80053720019c6fd22a743032fb797d6dd20d0a70b3645a247eb6ce78f4801ba312c
ep_bytes: ff250020001000000000000000000000
timestamp: 2024-04-16 18:16:24

Version Info:
0: [No Data]

MSILHeracles.92481 also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILHeracles.92481
Malwarebytes	Trojan.WebShell.MSIL
Zillya	Trojan.Webshell.Win32.16720
K7GW	Trojan ( 005b19ee1 )
K7AntiVirus	Trojan ( 005b19ee1 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Webshell.EV
ClamAV	Win.Packed.Webshell-10016062-0
Kaspersky	HEUR:Backdoor.MSIL.WebShell.gen
BitDefender	Gen:Variant.MSILHeracles.92481
Avast	Win32:BackdoorX-gen [Trj]
Tencent	Backdoor.MSIL.WebShell.kt
TACHYON	Backdoor/W32.DN-WebShell.15872.O
Emsisoft	Gen:Variant.MSILHeracles.92481 (B)
F-Secure	Trojan.TR/Dropper.MSIL.Gen
DrWeb	BackDoor.WebshellNET.9
VIPRE	Gen:Variant.MSILHeracles.92481
TrendMicro	TROJ_GEN.R011C0DDI24
FireEye	Gen:Variant.MSILHeracles.92481
Ikarus	Trojan.MSIL.Webshell
GData	MSIL.Trojan.PSE.146FGW9
Google	Detected
Avira	TR/Dropper.MSIL.Gen
Varist	W32/WebShell.E.gen!Eldorado
Arcabit	Trojan.MSILHeracles.D16941
ZoneAlarm	HEUR:Backdoor.MSIL.WebShell.gen
Microsoft	Backdoor:MSIL/Webshell.BB!MTB
AhnLab-V3	Backdoor/Win.WEBSHELL.C5557105
ALYac	Gen:Variant.MSILHeracles.92481
MAX	malware (ai score=86)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R011C0DDI24
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Webshell.EE!tr
AVG	Win32:BackdoorX-gen [Trj]

How to remove MSILHeracles.92481?

MSILHeracles.92481 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X