MSILHeracles.21985 malicious file

The MSILHeracles.21985 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.21985 virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSILHeracles.21985?


File Info:
crc32: 29D51F1C
md5: a215603c144697cc4dad557ccc022de0
name: A215603C144697CC4DAD557CCC022DE0.mlw
sha1: 86ec0ece5ba86e79790dce4d70058c4173df85f4
sha256: c2f21acde289adec4dbf7163480b89064e1eb476558c9729a520303cc75b40bc
sha512: a2fa81e87b200090eceea14acc54b9c705bd0728d6c57b3a7ef7f0fbb10ddd9e86803711c6ba3e53c15c1e84da7e989b2e2ac62caac57756b1ad5892a1ba80d2
ssdeep: 384:SexPyKWREi2f6XJFrlkXidanimLy2Twh99HghwhTX+VLTmphprpD7DcJOCDM4hlo:APXJFEnBahHhTuVLTMTJncJO2PhlpG
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: All Rights Reserved
Assembly Version: 7.372.528.461
InternalName: Od52319Qy8551T.exe
FileVersion: 7.372.528.461
CompanyName: Od52319Qy8551T Inc.
LegalTrademarks: Od52319Qy8551T
Comments: Od52319Qy8551T
ProductName: Od52319Qy8551T
ProductVersion: 7.372.528.461
FileDescription: Od52319Qy8551T
OriginalFilename: Od52319Qy8551T.exe
Translation: 0x0000 0x0514

MSILHeracles.21985 also known as:

Elastic	malicious (high confidence)
CrowdStrike	win/malicious_confidence_60% (W)
Cyren	W32/MSIL_Kryptik.DNK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.IIZ
APEX	Malicious
Avast	Win32:Trojan-gen
BitDefender	Gen:Variant.MSILHeracles.21985
MicroWorld-eScan	Gen:Variant.MSILHeracles.21985
Ad-Aware	Gen:Variant.MSILHeracles.21985
BitDefenderTheta	Gen:NN.ZemsilCO.34796.bm1@aKmBCVfi
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.MSILHeracles.21985
Emsisoft	Gen:Variant.MSILHeracles.21985 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Woreflint.A!cl
GData	Gen:Variant.MSILHeracles.21985
McAfee	Artemis!A215603C1446
MAX	malware (ai score=81)
Ikarus	Trojan.Inject
eGambit	Unsafe.AI_Score_85%
Fortinet	MSIL/GenKryptik.EYTI!tr
AVG	Win32:Trojan-gen

How to remove MSILHeracles.21985?

MSILHeracles.21985 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X