Win32/GenKryptik.EOLH (file analysis)

The Win32/GenKryptik.EOLH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GenKryptik.EOLH virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/GenKryptik.EOLH?


File Info:
crc32: 5375E37E
md5: 9641678039e677bfc67e962a2e01557c
name: 0f3tZtt4bIPVfQNmvZw.exe
sha1: 34dfc698e774c363a70bef40f75843b065056c61
sha256: 2357d4eaa37818073e61a15feb866d2f624e238f043fbe2de4109e07067a3462
sha512: 5dee10ee9fbc6877cd8a3e33892369b8ed87633f1a0fcd31e21f87c7765c8f5964de13a9df9fea7d89ad1ab329663f8925f87a0bfc44a9d9f69b26b5828dee78
ssdeep: 6144:u9AZ0jbH3bYJfhShfyWkwh9kDVIL8bP2NuQjwUyYjDzFo1:6A+YJENyWeZIL8bPxUyZ1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 1998
InternalName: PieDemo
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: PieDemo Application
ProductVersion: 1, 0, 0, 1
FileDescription: PieDemo MFC Application
OriginalFilename: PieDemo.EXE
Translation: 0x0409 0x04b0

Win32/GenKryptik.EOLH also known as:

Bkav	W32.AIDetectVM.malware2
FireEye	Generic.mg.9641678039e677bf
Cybereason	malicious.8e774c
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Invincea	heuristic
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.Emotet (A)
Endgame	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik.EOLH
Rising	Trojan.Kryptik!8.8 (TFE:dGZlOgVkdVUDE7830A)
Fortinet	W32/Kryptik.HEXP!tr
BitDefenderTheta	Gen:NN.ZexaF.34136.rq1@aODKzBfi

How to remove Win32/GenKryptik.EOLH?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/GenKryptik.EOLH (file analysis)