MSILPerseus.135745 (file analysis)

The MSILPerseus.135745 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSILPerseus.135745 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs

How to determine MSILPerseus.135745?


File Info:
crc32: 95FE1C94
md5: 66f09ea52345eca50e9d71bdf1180d61
name: 66F09EA52345ECA50E9D71BDF1180D61.mlw
sha1: 0aa20d681beabf7bbde72f6d5d3dbafdc4221c24
sha256: df10ce0648fcbbd64415deee3fdad30156e90f7e2822f0066da6b9c5201a8117
sha512: 382fea3ac30cd6d30adfc2579592a46380c5cd2b917912420ecc5538fd2f6741e6b158a27b12925a45c0706526f6923ba522632a0ad0090602763c711d75083f
ssdeep: 1536:8PlHeCRCP0N0kd/Q4KWXsn+YmO0B8ZPeHnv5j8Lf15STnobWl3IkJ5zWNcyOZAu:8PlHeCRCP0N0kd/Q4KWXsn+hOu44v5j
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 0.0.0.0
InternalName: WindowsApplication4.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: WindowsApplication4.exe

MSILPerseus.135745 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.MSILPerseus.135745
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Cybereason	malicious.52345e
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.MSILPerseus.135745
MicroWorld-eScan	Gen:Variant.MSILPerseus.135745
Tencent	Msil.Trojan.Dropper.Wrqm
Ad-Aware	Gen:Variant.MSILPerseus.135745
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34170.fm0@aWHcBQg
McAfee-GW-Edition	BehavesLike.Win32.Generic.mm
FireEye	Generic.mg.66f09ea52345eca5
Emsisoft	Gen:Variant.MSILPerseus.135745 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.MSIL.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.MSILPerseus.D21241
GData	Gen:Variant.MSILPerseus.135745
McAfee	Artemis!66F09EA52345
Ikarus	Trojan.Dropper
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove MSILPerseus.135745?

MSILPerseus.135745 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X