Categories: Malware

About “Win32/Kryptik.HIIN” infection

The Win32/Kryptik.HIIN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HIIN virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Norwegian (Nynorsk)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Anomalous binary characteristics

How to determine Win32/Kryptik.HIIN?


File Info:
crc32: CD412704md5: ccfa44b9fa02dabe3a1b1717056a4223name: CCFA44B9FA02DABE3A1B1717056A4223.mlwsha1: eaa9216e7e8bca3a514e648059febaa2f4581f1fsha256: 6493c3cbd764f7812b77e7165eeb2cb37ab77f55757b229d0f8509c628c9c5f7sha512: 5bf282e326846f1a43fd00cfdf12cc85ebd6720910e3bff354e387ddae191de30ae9dc69cf9b3b12632aae1ba753769939997f53f5e28219661df09414428daassdeep: 98304:gGpN6hC3Uk1HM5ceQlOK/Mrd8lZDKxlpb1W7jcTCt8oeBxGgpPxSwrXVsovXAvY:gedi0OslxA1WMIeBJ7gYGjUqvZ8Dg4type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
InternalName: triwilbifes.acsFileVers: 26.26.361ProductVersion: 1.0.22Copyright: Copyrighz (C) 2020, fadkafugTranslationUsa: 0x0272 0x04d4

Win32/Kryptik.HIIN also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Spynet.48
MicroWorld-eScan	Trojan.GenericKD.35771767
FireEye	Generic.mg.ccfa44b9fa02dabe
CAT-QuickHeal	Trojan.Agent
McAfee	GenericRXAA-AA!CCFA44B9FA02
Cylance	Unsafe
Sangfor	Malware
BitDefender	Trojan.GenericKD.35771767
K7GW	Trojan ( 00574e381 )
BitDefenderTheta	Gen:NN.ZexaF.34700.@pKfaSUfB6dG
Cyren	W32/Kryptik.CSM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Eb.bfo
Ad-Aware	Trojan.GenericKD.35771767
Emsisoft	Trojan.GenericKD.35771767 (B)
F-Secure	Trojan.TR/AD.GoCloudnet.otilm
TrendMicro	TrojanSpy.Win32.OUTBREAK.USMANLI20
McAfee-GW-Edition	BehavesLike.Win32.Trojan.rc
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Avira	TR/AD.GoCloudnet.otilm
Kingsoft	Win32.Hack.Undef.(kcloud)
Microsoft	Trojan:Win32/Glupteba!ml
Gridinsoft	Trojan.Win32.Kryptik.vb
Arcabit	Trojan.Bandit
AegisLab	Trojan.Win32.Malicious.4!c
ZoneAlarm	Trojan.Win32.Eb.bfo
GData	Trojan.GenericKD.35771767
AhnLab-V3	Malware/Win32.Generic.C4265936
Acronis	suspicious
VBA32	BScope.Trojan.Glupteba
MAX	malware (ai score=88)
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Kryptik.HIIN
TrendMicro-HouseCall	TrojanSpy.Win32.OUTBREAK.USMANLI20
Rising	Trojan.Kryptik!8.8 (TFE:5:fCIRPFtGjDU)
Ikarus	Trojan.Win32.Krypt
Fortinet	W32/Kryptik.HIFA!tr
Webroot	W32.Trojan.Gen
AVG	Win32:DropperX-gen [Drp]
Avast	Win32:DropperX-gen [Drp]
Qihoo-360	Win32/Trojan.582