MSIL/Kryptik.AGQO malicious file

The MSIL/Kryptik.AGQO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AGQO virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSIL/Kryptik.AGQO?


File Info:
name: 8F3B293D786E10EDFD06.mlw
path: /opt/CAPEv2/storage/binaries/a66149f52a72f20865dc2af3d9eb03951a113b9966f62568b2c7dc035fde3282
crc32: 43B4DD2D
md5: 8f3b293d786e10edfd06fbfd424fa622
sha1: e190ccba27bf7be2c602aa65f332d77404e503eb
sha256: a66149f52a72f20865dc2af3d9eb03951a113b9966f62568b2c7dc035fde3282
sha512: 7c65f8816abca52ac0b7bb07bb80a1762bb2905e3b1d7febab4f90c6ba349f16d5b93ee7b24b4fae74273e4420db68175532ac1269664119af73ec29cc86f36d
ssdeep: 12288:2foK4HTNXg0FhtI/LB02mjybTHe9iKfbuDB3j26MdZnA1/OibBzN:VnHtI/eyXe9xuDZ2BJC/OiFzN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12235D02352A18E0BD2925234CCD2C3B0AFA87EBCE773C2677FD9BD5BB476065A601145
sha3_384: c8095938efd0d6a4426917bcfce1d12f4987ff0da184c0c4847fc160f443920e9d36bc5e04780fb1b69dc480f529dbf3
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-10-04 10:20:30

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: Toshiba
FileDescription: network
FileVersion: 1.0.0.0
InternalName: wVHz.exe
LegalCopyright: Copyright © Toshiba 2013
LegalTrademarks: 
OriginalFilename: wVHz.exe
ProductName: network
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Kryptik.AGQO also known as:

Bkav	W32.AIDetectNet.01
FireEye	Generic.mg.8f3b293d786e10ed
Cylance	Unsafe
BitDefenderTheta	Gen:NN.ZemsilF.34698.gn0@aiC84qp
Symantec	Scr.Malcode!gdn34
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.AGQO
Kaspersky	VHO:Trojan-Spy.MSIL.Noon.gen
Avast	PWSX-gen [Trj]
McAfee-GW-Edition	Artemis!Trojan
APEX	Malicious
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
McAfee	Artemis!8F3B293D786E
Malwarebytes	Malware.AI.1869047422
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	PWSX-gen [Trj]

How to remove MSIL/Kryptik.AGQO?

MSIL/Kryptik.AGQO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X