Heur.MSIL.Androm.5 information

The Heur.MSIL.Androm.5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Heur.MSIL.Androm.5 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Heur.MSIL.Androm.5?


File Info:
name: 1BF856E11E6FA6A779BF.mlw
path: /opt/CAPEv2/storage/binaries/7444f6a4448493df3490e999505fa09855885a3e4f4710811602b64da7b2cefa
crc32: F09ACCA1
md5: 1bf856e11e6fa6a779bf77e5a29d8197
sha1: a5a4257c213f8c4ce1be39511a6082359c1be79c
sha256: 7444f6a4448493df3490e999505fa09855885a3e4f4710811602b64da7b2cefa
sha512: 356bb81df712de55079c7853709d0047b64953a96b1853c1f47e5d7d1516757ea01b3043625aebdd8e17c761b92801eda75859eefd32f1ce8442f116ad010b8a
ssdeep: 192:ar7WzFYYiNGuIrSPtQBuokwlwActfVZyFd+Wz7o+yv:ar7WzOxvIrS1auokwlwAmZyFdN8+y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15B321952E398877ADD7A1FF26C7266400776E70498B7CA7E6884200B7FB334157D2B61
sha3_384: 04f41648e91b15e9674901d9d990a1563b7c3b5d716521e329ff2e1fdda86d72b744d47e2689f1fabdaedfc3cd9d6fe6
ep_bytes: ff250020400000000000000000000000
timestamp: 2103-01-28 21:00:45

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: RSOD
FileVersion: 1.0.0.0
InternalName: RSOD.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: RSOD.exe
ProductName: RSOD
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Heur.MSIL.Androm.5 also known as:

Lionic	Trojan.Win32.Androm.4!c
MicroWorld-eScan	Gen:Heur.MSIL.Androm.5
FireEye	Gen:Heur.MSIL.Androm.5
Cybereason	malicious.11e6fa
APEX	Malicious
BitDefender	Gen:Heur.MSIL.Androm.5
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Gen:Heur.MSIL.Androm.5
Emsisoft	Gen:Heur.MSIL.Androm.5 (B)
McAfee-GW-Edition	Artemis!Trojan
Ikarus	Gen.MSIL.Androm
GData	Gen:Heur.MSIL.Androm.5
MAX	malware (ai score=86)
Arcabit	Trojan.MSIL.Androm.5
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!1BF856E11E6F
TrendMicro-HouseCall	TROJ_GEN.R002H09L921
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
AVG	Win32:MalwareX-gen [Trj]

How to remove Heur.MSIL.Androm.5?

Heur.MSIL.Androm.5 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X