About “MSIL/GenKryptik.FXYX” infection

The MSIL/GenKryptik.FXYX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GenKryptik.FXYX virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSIL/GenKryptik.FXYX?


File Info:
name: 646CCB6C7CEF58878F1E.mlw
path: /opt/CAPEv2/storage/binaries/1c2702f53ece0021da4b1eff0a093f66d316865a679bc9f60bf971128c62269f
crc32: 5859C8BF
md5: 646ccb6c7cef58878f1e44ff1a349069
sha1: 87e68c261124ff44beb3088ed3b3d28bfde5fb7b
sha256: 1c2702f53ece0021da4b1eff0a093f66d316865a679bc9f60bf971128c62269f
sha512: 51ac83a21327ffdf5d32140a94f03240778d761ac6b5f9802d3a906c1236b9b3e78de2e15867140c6f761d89668711fd0b1a7545ec3492987ea3638a56bd93ea
ssdeep: 24576:Tw4UZvybcv8vXxef9YfZ5MMAjI5LLXGldWaqzOJeBxa7x9hVAoNTA13Ix4xy1H:T6d8vcfefZ5MBjI5LcqyUja7PI3I91H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15285DFAC352035DFC86BC6BAC9A82D64EB60346A530B9603902315EC9E5DBE7DF054F7
sha3_384: 50c1e8f96a5a3024320272b39cc0bc4b4f1f0db120d625fc6a6f053f5db74f89e1251ef9d828cb64005355c45ed280fb
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-07-26 06:55:05

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: The Flying Bear
FileDescription: Flying Bear
FileVersion: 2.0
InternalName: CryptoKeyRig.exe
LegalCopyright: The Flying Bear ltd 2022
LegalTrademarks: 
OriginalFilename: CryptoKeyRig.exe
ProductName: Flying Bear
ProductVersion: 2.0
Assembly Version: 2.0.0.0

MSIL/GenKryptik.FXYX also known as:

Bkav	W32.AIDetectNet.01
Cylance	Unsafe
Cybereason	malicious.61124f
Cyren	W32/MSIL_Agent.DPT.gen!Eldorado
Symantec	Scr.Malcode!gdn30
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/GenKryptik.FXYX
APEX	Malicious
Kaspersky	VHO:Trojan-PSW.MSIL.Agensla.gen
Avast	Win32:PWSX-gen [Trj]
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.646ccb6c7cef5887
Sophos	ML/PE-A
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
VBA32	CIL.HeapOverride.Heur
Rising	Trojan.Generic/MSIL@AI.98 (RDM.MSIL:fjOOrFccoVfcek1e5n1Fpw)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.FVXS!tr
BitDefenderTheta	Gen:NN.ZemsilF.34806.Qn0@aSSoEej
AVG	Win32:PWSX-gen [Trj]

How to remove MSIL/GenKryptik.FXYX?

MSIL/GenKryptik.FXYX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X