MSIL/Kryptik.AAQH (file analysis)

The MSIL/Kryptik.AAQH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AAQH virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/Kryptik.AAQH?


File Info:
crc32: F9ECAD73
md5: 53844b39af77e3290b7f0b296c869615
name: 53844B39AF77E3290B7F0B296C869615.mlw
sha1: 608714ce6646af8089e0f87093d8b7153584e60a
sha256: 7a388ead62a8f818b36c9c9a1938c2172c4fa05edfc71307980131c53c69d054
sha512: 3214a16bb5730ec42edd1c8b5645ee932a5d17c68755a55993f234193101fa7c63f0d8d0b124b292bc6b42d90ff8a884d2683efa1f93a5441fe549aeaf55f4b3
ssdeep: 12288:7pENvMxFJ4l5/x4mvU4uUns3UCrhDxYIuhY8H3MOPiBV+yO5r5BC7s:7aUx65/x4mvKUsZtDruhKO6BV+yOs
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2011
Assembly Version: 1.0.7781.38641
InternalName: iQuiz.exe
FileVersion: 1.0.0.0
CompanyName: The Nickersoft Corporation
LegalTrademarks: 
Comments: An iSchool test utility for creating, distributing, and grading digital quizzes
ProductName: iQuiz
ProductVersion: 1.0.0.0
FileDescription: iQuiz Teacher Professional Edition
OriginalFilename: iQuiz.exe

MSIL/Kryptik.AAQH also known as:

K7AntiVirus	Trojan ( 0057b8171 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Nanocore.23
Cylance	Unsafe
Sangfor	Trojan.Win32.AgentTesla.ml
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:MSIL/Kryptik.e9c449a9
K7GW	Trojan ( 0057b8171 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.AAQH
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.NanoBot.gen
BitDefender	Trojan.GenericKD.36797144
MicroWorld-eScan	Trojan.GenericKD.36797144
Ad-Aware	Trojan.GenericKD.36797144
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Agent.mresu@0
BitDefenderTheta	Gen:NN.ZemsilF.34684.bn0@auY7grl
FireEye	Generic.mg.53844b39af77e329
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Gen
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Script/Phonzy.B!ml
AegisLab	Trojan.MSIL.NanoBot.4!c
GData	Win32.Trojan.Agent.4713IZ
AhnLab-V3	Trojan/Win.Generic.C4442864
McAfee	PWS-FCYJ!53844B39AF77
MAX	malware (ai score=99)
Malwarebytes	Malware.AI.4207739217
TrendMicro-HouseCall	TROJ_GEN.R002H0DDR21
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ikarus	Trojan.Inject
Fortinet	MSIL/Kryptik.AANB!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove MSIL/Kryptik.AAQH?

MSIL/Kryptik.AAQH removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X