MSIL/Kryptik.ABSM malicious file

The MSIL/Kryptik.ABSM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.ABSM virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.ABSM?


File Info:
crc32: CD807C4D
md5: d50e9b1a5b7e03c22a204d8f25fb6d2b
name: D50E9B1A5B7E03C22A204D8F25FB6D2B.mlw
sha1: 961515073ebe173aaadc78108c48e40b01239464
sha256: 86853b3dede4f79bee02211897ff573cee303fffa217521ff8c3145eb091e887
sha512: 00b18418aa8f5fbf010eff9bc192d1a515eb465f1f25f8afb5a56e2d68ed3dd7bf67ce9bb08045ab50b5f180a86d0e51114945921c0c37aff46c66b9bb0b6693
ssdeep: 12288:ZBpJb7niZLBBBBBBBBBBBXBBBBBBBBBBBXdVLPSL7pwkqcgK4GmAHKj+v1wo7A5:vppL7+JtZ/qkXYYWWedt25I/9n
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2016
Assembly Version: 1.0.0.0
InternalName: IDispatchImplAttribu.exe
FileVersion: 1.0.0.0
CompanyName: flextronics
LegalTrademarks: flex
Comments: flex spare part room
ProductName: Spare Part
ProductVersion: 1.0.0.0
FileDescription: Spare Part
OriginalFilename: IDispatchImplAttribu.exe

MSIL/Kryptik.ABSM also known as:

Elastic	malicious (high confidence)
McAfee	Artemis!D50E9B1A5B7E
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
Cybereason	malicious.73ebe1
ESET-NOD32	a variant of MSIL/Kryptik.ABSM
APEX	Malicious
Cynet	Malicious (score: 100)
Alibaba	Trojan:Win32/starter.ali1000139
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34050.Zm0@a4!LfGf
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1140941
ZoneAlarm	UDS:DangerousObject.Multi.Generic
VBA32	CIL.HeapOverride.Heur
Ikarus	Trojan.MSIL.Krypt
Paloalto	generic.ml
Qihoo-360	Win32/Heur.Generic.HwMAAl8A

How to remove MSIL/Kryptik.ABSM?

MSIL/Kryptik.ABSM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X