MSIL/Kryptik.MDH removal instruction

The MSIL/Kryptik.MDH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.MDH virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine MSIL/Kryptik.MDH?


File Info:
name: 9DBD73C1F3E15D661B46.mlw
path: /opt/CAPEv2/storage/binaries/547f55239922ced6697dbfa2394842ecdb9172f46ae88a12d5b5a2c1233a8176
crc32: AC646AD7
md5: 9dbd73c1f3e15d661b46bafef40d8f0d
sha1: 1d4d18b91cd46f6f2db12997f01a2df69e44db2e
sha256: 547f55239922ced6697dbfa2394842ecdb9172f46ae88a12d5b5a2c1233a8176
sha512: 54f988f18ae60e6b9a97630f2959d80f617488b9721b3660ecd8a6054ae5c40ea291909754212a369a3da107f5b6db2a3ea82360f1df5a43dcac21a39d06c814
ssdeep: 768:GVmTBMk5IFkYLDG/FV7tseez14Z6qIaS6PSD8IqfdJvZbEpb6OJW9:YmFTRj7Tez1XqHPUqfBopbtQ9
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T19D13C02E96F401BBD4BC1F74262389920E7DA605CA3677AC35B5120FADF12C70F22756
sha3_384: d6d9c71c54526cc93b2b5951cd84fd8ae489e4f812fd604cf47133a3e737c9ab26d2f8b0535921adeb7e984e9c1b8c07
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2038-05-15 05:41:19

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WindowsApp2
FileVersion: 1.0.0.0
InternalName: WindowsApp2.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: WindowsApp2.exe
ProductName: WindowsApp2
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Kryptik.MDH also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CrowdStrike	win/malicious_confidence_90% (D)
ESET-NOD32	a variant of MSIL/Kryptik.MDH
Kaspersky	HEUR:Backdoor.MSIL.Generic
Sophos	ML/PE-A
FireEye	Generic.mg.9dbd73c1f3e15d66
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
APEX	Malicious
MaxSecure	Trojan.Malware.300983.susgen

How to remove MSIL/Kryptik.MDH?

MSIL/Kryptik.MDH removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X