Categories: Trojan

Trojan.Agent.HawkEye (file analysis)

The Trojan.Agent.HawkEye is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan.Agent.HawkEye virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine Trojan.Agent.HawkEye?


File Info:

crc32: 5D9ECA90md5: 0067af258a7a9346fec4c7a23fc804a5name: flocrypt.exesha1: 18ca38cff46fa04503d15e583bf8b4d2838fcecbsha256: deac7be488ab75b811902fa9e88d18ebcfaa0e5f38692ccd870b86885d576e70sha512: 4de485f77e629e7911462bb436cf3db195f3b48b6dfd72bc871f4aae9a5a6fa218e1976b4fbd6f0e9d6584fb0e4857ef853785dc33aac96100bf450dceeb3e10ssdeep: 12288:Qamv3WAY54p2p2YiTnK9g1j/kENJjN3CiLhEnWmUJST6sOSkGiNNIQs1X7dLtep:QamvGAY5CW9gh/kENJjN3CmEPqVsfk/type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0LegalCopyright: Copyright KadenCreate 2019Assembly Version: 1.0.0.0InternalName: KadenCreate.exeFileVersion: 1.0.0.0CompanyName: LegalTrademarks: Comments: ProductName: KadenCreateProductVersion: 1.0.0.0FileDescription: KadenCreateOriginalFilename: KadenCreate.exe

Trojan.Agent.HawkEye also known as:

DrWeb Trojan.Packed2.41837
MicroWorld-eScan Gen:Variant.MSILPerseus.200939
FireEye Generic.mg.0067af258a7a9346
CAT-QuickHeal Trojan.MSIL
ALYac Trojan.Agent.HawkEye
Cylance Unsafe
K7AntiVirus Trojan ( 700000121 )
BitDefender Gen:Variant.MSILPerseus.200939
K7GW Trojan ( 700000121 )
Cybereason malicious.ff46fa
Invincea heuristic
BitDefenderTheta Gen:NN.ZemsilF.32250.Tm0@aqxbTCi
Symantec Trojan Horse
ESET-NOD32 a variant of MSIL/Kryptik.QME
TrendMicro-HouseCall TROJ_GEN.R020C0WK819
Avast Win32:RATX-gen [Trj]
GData Gen:Variant.MSILPerseus.200939
Kaspersky HEUR:Trojan.MSIL.Disfa.gen
Alibaba Trojan:Win32/Starter.ali2000005
NANO-Antivirus Trojan.Win32.Disfa.ggmldl
ViRobot Trojan.Win32.Z.Kryptik.749568.KP
AegisLab Trojan.MSIL.Disfa.4!c
Rising Trojan.Kryptik!8.8 (TFE:C:t1aidM5xDSV)
Endgame malicious (high confidence)
Sophos Mal/Generic-S
F-Secure Trojan.TR/Kryptik.ldzgd
TrendMicro TROJ_GEN.R020C0WK819
McAfee-GW-Edition BehavesLike.Win32.Generic.bc
Ikarus Trojan.MSIL.Crypt
Jiangmin Trojan.Generic.ehfvl
Avira TR/Kryptik.ldzgd
Antiy-AVL Trojan/MSIL.Disfa
Microsoft Trojan:Win32/Occamy.C
Arcabit Trojan.MSILPerseus.D310EB
ZoneAlarm HEUR:Trojan.MSIL.Disfa.gen
AhnLab-V3 Malware/Win32.RL_Generic.C3545815
McAfee GenericRXJA-ZE!0067AF258A7A
MAX malware (ai score=100)
VBA32 TScope.Trojan.MSIL
Malwarebytes Trojan.Crypt.MSIL
Panda Trj/CI.A
APEX Malicious
Fortinet MSIL/Kryptik.QME!tr
Ad-Aware Gen:Variant.MSILPerseus.200939
AVG Win32:RATX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Win32/Trojan.593

How to remove Trojan.Agent.HawkEye?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

2 months ago