Malware

What is “Win32/Kryptik.HLOG”?

Malware Removal

The Win32/Kryptik.HLOG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HLOG virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Serbian
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Kryptik.HLOG?


File Info:

crc32: A61B953F
md5: 592f088f8c14ef32b6eef5b87f6a00c1
name: 592F088F8C14EF32B6EEF5B87F6A00C1.mlw
sha1: 2b11cb3ff885f5e6f6e20dfa0e8e247041e0c5a7
sha256: 10c557791bee29fdb6fb84c9e394a1f3966eee42d3ddd73061f9440e8d1fc332
sha512: 205c4669138b6ff88b1ef5f88d28d010416591eb09ddd4eb3f626db0a24ce10f241bd62d750919662d8aec20a6fa163d99e239b7e47a4c53dddf7a7f9c5cee0b
ssdeep: 6144:d9u7bIUTIBCNgQu1VfOTUO7fU2WMSTOXKB7:d9IIBCNgHnJSQMSN7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: Variant of duck
FileVersion: 6.26.343
Copyright: Copyrighz (C) 2020, wodkagudy
ProductVersion: 1.13.22
TranslationUsa: 0x0173 0x011d

Win32/Kryptik.HLOG also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 005662121 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/GandCrab.75390062
K7GWTrojan ( 005662121 )
Cybereasonmalicious.ff885f
CyrenW32/Kryptik.EMI.gen!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.HLOG
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
KasperskyHEUR:Trojan-Spy.Win32.Stealer.gen
BitDefenderTrojan.GenericKD.37164106
MicroWorld-eScanTrojan.GenericKD.37164106
Ad-AwareTrojan.GenericKD.37164106
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Trojan.fm
FireEyeGeneric.mg.592f088f8c14ef32
EmsisoftTrojan.GenericKD.37164106 (B)
SentinelOneStatic AI – Malicious PE
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Azorult!ml
AegisLabTrojan.Win32.Malicious.4!c
GDataWin32.Trojan.PSE.XIT06G
AhnLab-V3Infostealer/Win.SmokeLoader.R428791
Acronissuspicious
McAfeeRDN/Generic PWS.y
MAXmalware (ai score=87)
VBA32Malware-Cryptor.InstallCore.6
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.D106 (CLASSIC)
IkarusTrojan.MSIL.NetSteal
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.HLOG!tr
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HgIASXgA

How to remove Win32/Kryptik.HLOG?

Win32/Kryptik.HLOG removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment