What is "MSILHeracles.13876 (B)"?

The MSILHeracles.13876 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSILHeracles.13876 (B) virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSILHeracles.13876 (B)?


File Info:
crc32: 2E24E7D9
md5: 2528f2e199a11008a4efaa70191f15fc
name: 2528F2E199A11008A4EFAA70191F15FC.mlw
sha1: 0d8bbbda570215554d7111228c05101f5d106e6d
sha256: be0c9049c962fe67ab2b15bc85c934f4bc0a2828a98b679eccfb211611356606
sha512: 131c9894bba36c1712919abdf3a8bfa728be6437700e579a10268bb7882863222fdd72bf482d0bcbf3b4366a030fc9b84df92b40c3cad35979daa97d4ddde2d8
ssdeep: 3072:2A1ON/Ny8AQWHbsOlngn0/7L15il28uoZ1s6KAQxdbVrn87c+3nVcXODCQOz32R9:ON1mQW7Xngn0zL1alVM2R9
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: KaptanS2.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: KaptanS2
ProductVersion: 1.0.0.0
FileDescription: KaptanS2
OriginalFilename: KaptanS2.exe

MSILHeracles.13876 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILHeracles.13876
FireEye	Generic.mg.2528f2e199a11008
McAfee	Artemis!2528F2E199A1
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Gen:Variant.MSILHeracles.13876
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:MSIL/Kryptik.2dbfa7e5
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware	Gen:Variant.MSILHeracles.13876
Emsisoft	Gen:Variant.MSILHeracles.13876 (B)
F-Secure	Trojan.TR/ATRAPS.Gen
McAfee-GW-Edition	Artemis!Trojan
Sophos	ML/PE-A
Ikarus	Trojan.MSIL.CryptoObfuscator
eGambit	Unsafe.AI_Score_99%
Avira	TR/ATRAPS.Gen
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.MSILHeracles.D3634
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.MSILHeracles.13876
Cynet	Malicious (score: 90)
AhnLab-V3	Malware/Win32.RL_Generic.C4345714
BitDefenderTheta	Gen:NN.ZemsilF.34590.mm2@aqnpLSc
ALYac	Gen:Variant.MSILHeracles.13876
Malwarebytes	Backdoor.Bladabindi
ESET-NOD32	a variant of MSIL/Kryptik.IRC
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.IRC!tr
AVG	MSIL:GenMalicious-BF [Trj]
Cybereason	malicious.a57021
Avast	MSIL:GenMalicious-BF [Trj]
Qihoo-360	Win32/Trojan.Generic.HwMAcJcA

How to remove MSILHeracles.13876 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “MSILHeracles.13876 (B)”?