MSIL/Kryptik.AGRE malicious file

The MSIL/Kryptik.AGRE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.AGRE virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/Kryptik.AGRE?


File Info:
name: 96E525F920AED5CD7358.mlw
path: /opt/CAPEv2/storage/binaries/3dab54b78d9749eb34e6e93d452f0f58ea20204dd7ef0ee599d8ba484849b0ff
crc32: 45F4D93E
md5: 96e525f920aed5cd7358feec8b21cf9e
sha1: 7d62ba2c3bc90a7ea82b6bcbc5a5c399191bf40d
sha256: 3dab54b78d9749eb34e6e93d452f0f58ea20204dd7ef0ee599d8ba484849b0ff
sha512: 3aaecae5121fe23c2197a779d6c39f099b471000e84c92c3835a3ea0faa04b93b9ac62ccbf2f572df4bdb54b43ead2de41085775ddae85ccfea84be4aa20a8df
ssdeep: 384:Nia78lwpXLPn/ce8qGSWQwEdCaBEHRNZJX:QPC7/JHGSWWhkfJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10B623A36AFAF4B31E93F4BBF8463C9C043B852121D9AC95DD8A122B65D16FF4CA80191
sha3_384: 33e05a4e33940293aad2d3cb539aa12282263e5d8c7ab1a3f7deddff464a6b28be27a28c7b4a753d60725c060824cf87
ep_bytes: ff250020400000000000000000000000
timestamp: 2053-06-22 07:36:33

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: Eodjn.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Eodjn.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Kryptik.AGRE also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.MSIL.Agensla.i!c
tehtris	Generic.Malware
Cynet	Malicious (score: 100)
McAfee	Artemis!96E525F920AE
Malwarebytes	Trojan.Downloader.MSIL.Generic
Sangfor	Trojan.Msil.Agent.Vvvh
Cyren	W32/MSIL_Kryptik.HJS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.AGRE
APEX	Malicious
Kaspersky	VHO:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Trojan.GenericKD.62548070
MicroWorld-eScan	Trojan.GenericKD.62548070
Avast	SpywareX-gen [Trj]
Ad-Aware	Trojan.GenericKD.62548070
Emsisoft	Trojan.GenericKD.62548070 (B)
DrWeb	Trojan.PackedNET.1603
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.96e525f920aed5cd
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.MSIL.Inject
MAX	malware (ai score=81)
Kingsoft	Win32.PSWTroj.Undef.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	VHO:Trojan-PSW.MSIL.Agensla.gen
Google	Detected
Acronis	suspicious
VBA32	Downloader.MSIL.gen.rexp
Cylance	Unsafe
Rising	Stealer.Agensla!8.13266 (CLOUD)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.LXR!tr
BitDefenderTheta	Gen:NN.ZemsilF.34698.am0@autGApb
AVG	SpywareX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove MSIL/Kryptik.AGRE?

MSIL/Kryptik.AGRE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X