MSILHeracles.16641 malicious file

The MSILHeracles.16641 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.16641 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSILHeracles.16641?


File Info:
crc32: A069FA76
md5: 514c9a5747bde732588c339babc6dd41
name: 514C9A5747BDE732588C339BABC6DD41.mlw
sha1: 26b7110ee9c2a9211eeaf5e28a63df80cc1d626f
sha256: 326999a86a3d9068179fbfd1f9ba29f9a47f8a9e61ad3d53cf694fb8f2b21cee
sha512: 9c922d9f19033b968ad1916dd0e83282a9cac8c0f98c58c445c178a56c619cb36033b32d17712158cad2c93d2f36378c798ed3c3645e37cc6e02ba75962dc3e1
ssdeep: 12288:A5D+umyo7jhsgPmwwEqRcgK4RiZ55HhckLhP9XNGM/FqxQDearmWxQLd8pgwGST:qRKzZ55L3yQDfrmpGlzyP60JF
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Marius I. V., @marius4th 2018
Assembly Version: 0.2.7.1
InternalName: TimerQueue.exe
FileVersion: 0.2.7.1
CompanyName: M4th
LegalTrademarks: WeSP Editor
Comments: A program for making and editing vector graphics for the web.
ProductName: WeSP Editor
ProductVersion: 0.2.7.1
FileDescription: WeSP Editor
OriginalFilename: TimerQueue.exe

MSILHeracles.16641 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.MSILHeracles.16641
Cylance	Unsafe
Cyren	W32/MSIL_Kryptik.EKN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.ABEQ
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Androm.gen
BitDefender	Gen:Variant.MSILHeracles.16641
MicroWorld-eScan	Gen:Variant.MSILHeracles.16641
Ad-Aware	Gen:Variant.MSILHeracles.16641
McAfee-GW-Edition	PWS-FCTY!514C9A5747BD
FireEye	Gen:Variant.MSILHeracles.16641
Emsisoft	Gen:Variant.MSILHeracles.16641 (B)
SentinelOne	Static AI – Suspicious PE
Kingsoft	Win32.Hack.Undef.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.MSILHeracles.D4101
GData	Gen:Variant.MSILHeracles.16641
AhnLab-V3	Trojan/Win.Tnega.C4500063
McAfee	PWS-FCTY!514C9A5747BD
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.2196901975
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.ABCL!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove MSILHeracles.16641?

MSILHeracles.16641 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X