MSIL/Kryptik.ACCD (file analysis)

The MSIL/Kryptik.ACCD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.ACCD virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Kryptik.ACCD?


File Info:
crc32: E66B8B8E
md5: 8c3cfb254b3a01df7cc9f6de2d73c79b
name: 8C3CFB254B3A01DF7CC9F6DE2D73C79B.mlw
sha1: f179f17f873e6fc9e6c01cd2ad09d1378a4837f7
sha256: 2f75d964a726ab9db1fadfb01ffaeeeb861292ca8184639d2f7c52f572013fe7
sha512: 24d8438021e5c7d2b16f07e2bca8e2da1bf8da30e38aa35133bed23127375958ad851eab175f502cdd9c2c98e0dcedfef9967ec36cc4a78670e00bb261745271
ssdeep: 49152:Czq/7xXNlq3zBDlNC0CJf7nHIBTI/u1t1f:
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2019
Assembly Version: 1.0.0.0
InternalName: BlogAndDatabase.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: BlogAndDatabase
ProductVersion: 1.0.0.0
FileDescription: BlogAndDatabase
OriginalFilename: BlogAndDatabase.exe

MSIL/Kryptik.ACCD also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.957
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46718171
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Kryptik.ali2000016
K7GW	Trojan ( 0057fb7b1 )
Cybereason	malicious.f873e6
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.ACCD
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Agent.gen
BitDefender	Trojan.GenericKD.46718171
MicroWorld-eScan	Trojan.GenericKD.46718171
Ad-Aware	Trojan.GenericKD.46718171
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34050.@p0@aqC78Vh
McAfee-GW-Edition	PWS-FCZZ!8C3CFB254B3A
FireEye	Generic.mg.8c3cfb254b3a01df
Emsisoft	Trojan.GenericKD.46718171 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/AgentTesla!ml
GData	Trojan.GenericKD.46718171
McAfee	PWS-FCZZ!8C3CFB254B3A
MAX	malware (ai score=84)
TrendMicro-HouseCall	TROJ_GEN.R06CH06GV21
Ikarus	Trojan.Agent.EX
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.ACCR!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Trojan.Generic

How to remove MSIL/Kryptik.ACCD?

MSIL/Kryptik.ACCD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X