MSIL/GenKryptik.FFHN malicious file

The MSIL/GenKryptik.FFHN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/GenKryptik.FFHN virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/GenKryptik.FFHN?


File Info:
crc32: 6F41F145
md5: eb94143ced217b07d1e8edf939eba4ab
name: EB94143CED217B07D1E8EDF939EBA4AB.mlw
sha1: bd05478fa232e98c66919ec131dbee416f8e5b92
sha256: 10f9937ef84f621801754122000968d454f68999c2899e9d763104f3204d6d92
sha512: da423695a403ebaf78327023233e591a06c67762b0cee15a48ba8dd0ef55defd330ea98fc1a0e573614b0a961ac95c1aed3583ff9eeb9328f1ece0a26cf68ee8
ssdeep: 6144:E1BzRQJH57ukTKD6HtHxuGKATcdKPXbDtttdttttAhArKZWeSFynwSPFWAB8uxM:EVQf7TTKGNHF5cdKPXbchArKZWeSFyw
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 7.9.0.79
InternalName: Wpjtm.exe
FileVersion: 7.9.0.79
CompanyName: Microsoft
LegalTrademarks: 
Comments: Mimecast.Services.Windows.Host
ProductName: Mimecast.Services.Windows.Host
ProductVersion: 7.9.0.79
FileDescription: Mimecast.Services.Windows.Host
OriginalFilename: Wpjtm.exe

MSIL/GenKryptik.FFHN also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (D)
Cybereason	malicious.fa232e
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/GenKryptik.FFHN
APEX	Malicious
Kaspersky	UDS:Trojan-Downloader.MSIL.Seraph.gen
BitDefenderTheta	Gen:NN.ZemsilF.34690.wm0@aiOd7Yg
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
FireEye	Generic.mg.eb94143ced217b07
SentinelOne	Static AI – Malicious PE
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!EB94143CED21
Ikarus	Trojan.MSIL.Inject

How to remove MSIL/GenKryptik.FFHN?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/GenKryptik.FFHN malicious file