MSIL/Kryptik.AARZ (file analysis)

The MSIL/Kryptik.AARZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AARZ virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.AARZ?


File Info:
crc32: 8F2EAA9C
md5: 59e1199f32a8f13b0efbdd092b02b165
name: 59E1199F32A8F13B0EFBDD092B02B165.mlw
sha1: aed745bc896ea20b20859f55a3a18ca10e1463e3
sha256: 9133c16f469cf207152a1a8b2d8f0c59533d2f632b17828973c6a6a37b31fa97
sha512: b6607e0246b398db47de1b852e0b94ab311c5d0d423ce735a6e537b13563f381112afb9311fd6a80a580075dfccfd0f29d4ac8cf224cbd9eee7dbdda75899f8d
ssdeep: 12288:qD9VXrz9M0mo86HiBADJuSxRvi1W8rLZ2xYhdUezVfyo8jys:qX7zx2VIez5yLj
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: Student Dashboard.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Student Dashboard
ProductVersion: 1.0.0.0
FileDescription: Student Dashboard
OriginalFilename: Student Dashboard.exe

MSIL/Kryptik.AARZ also known as:

Elastic	malicious (high confidence)
CrowdStrike	win/malicious_confidence_90% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.AARZ
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34686.Nm0@a8CNLpd
McAfee-GW-Edition	BehavesLike.Win32.Generic.jh
FireEye	Generic.mg.59e1199f32a8f13b
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
Malwarebytes	MachineLearning/Anomalous.94%
Ikarus	Trojan.Inject
Fortinet	MSIL/Kryptik.AANB!tr
AVG	Win32:MalwareX-gen [Trj]

How to remove MSIL/Kryptik.AARZ?

MSIL/Kryptik.AARZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X