About “MSILHeracles.52869” infection

The MSILHeracles.52869 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILHeracles.52869 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine MSILHeracles.52869?


File Info:
name: 628B0D8E2C808D9F6B69.mlw
path: /opt/CAPEv2/storage/binaries/47905bae44ffa27f48d89525034915661919accf7498380535c2247d89784d81
crc32: 9044C4EC
md5: 628b0d8e2c808d9f6b6904691b5c552f
sha1: 34d5176e7626ff6420ea1146fc8ca45e8e25104f
sha256: 47905bae44ffa27f48d89525034915661919accf7498380535c2247d89784d81
sha512: a534308210a0bd78002d63b3373f0215dd82e27c1aa931c4de2a3ff8c060e2f9cc182c8e01b7b1b9cc29cb51a6d4f020363ca97b584cc4d81a550caff5cba9e6
ssdeep: 48:6kfL76BqTCO9XRJf6hCg0RoJWVDS91ul6a3uq:YBqT/2QeoDhMK
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1E671A81693E8469BE06347B46FF383066370FC605B23972F1C841319BC917649B71BB9
sha3_384: 6789f46a1f1ae00ed227c4e5872829c6732bf18e1dea4456196b9dd3ead74886cda2407c063644f9a942296e5704aa66
ep_bytes: ff250020001000000000000000000000
timestamp: 2022-10-03 02:41:43

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: sk4crl25.dll
LegalCopyright:  
OriginalFilename: sk4crl25.dll
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

MSILHeracles.52869 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.MSIL.Small.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILHeracles.52869
Skyhigh	GenericRXTF-CF!628B0D8E2C80
McAfee	GenericRXTF-CF!628B0D8E2C80
Cylance	unsafe
Zillya	Trojan.Agent.Win32.3055588
K7AntiVirus	Trojan ( 005932bf1 )
Alibaba	Trojan:MSIL/MalwareX.c2e769bb
K7GW	Trojan ( 005932bf1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.MSILHeracles.DCE85
VirIT	Trojan.Win32.MSIL.BVH
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Agent.VJU
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.MSIL.Small.gen
BitDefender	Gen:Variant.MSILHeracles.52869
Avast	Win32:MalwareX-gen [Trj]
Tencent	Msil.Trojan.Small.Bnhl
Emsisoft	Gen:Variant.MSILHeracles.52869 (B)
F-Secure	Heuristic.HEUR/AGEN.1364185
VIPRE	Gen:Variant.MSILHeracles.52869
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Google	Detected
Avira	HEUR/AGEN.1364185
Antiy-AVL	Trojan/MSIL.Small
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Trojan.MSIL.Small.gen
GData	Gen:Variant.MSILHeracles.52869
Varist	W32/MSIL_Agent.DIN.gen!Eldorado
AhnLab-V3	Trojan/Win.Generic.R495006
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.9320969.susgen
Fortinet	MSIL/Agent.VJU!tr
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove MSILHeracles.52869?

MSILHeracles.52869 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X