Categories: Malware

Win32/Kryptik.HNWB information

The Win32/Kryptik.HNWB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HNWB virus can do?

Dynamic (imported) function loading detected
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Kryptik.HNWB?


File Info:
name: E48D3212609D5EB9B4C0.mlwpath: /opt/CAPEv2/storage/binaries/fab3c86d2ae675e2e705c27f064296712d6bdc1ffe8d4dfba79aeb0702b53696crc32: DAA64A97md5: e48d3212609d5eb9b4c0e8f8ae140a92sha1: a1625afc080a89a8ef1a0c2ab9ff9aa22815e0d5sha256: fab3c86d2ae675e2e705c27f064296712d6bdc1ffe8d4dfba79aeb0702b53696sha512: cd5228d929b80a77b0b53c4498aef00130822b2170ee8b9d84585e1500b6a36c4b30a8403cc4b866571c7cb00f82a3d0ec85335e8ffaba4bf142d80fe8629f0cssdeep: 24576:8x08qf2SN2m3Q0NW+kFQKr1VJ9BMGdkbiXXfwwH:8x08qfJN2m3QUkhr1VJ9ToiXXjtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A94508E016CA5D74D4FF19334EC98BFC20216C698D6D4B3A24EBF2992EB9FC30915196sha3_384: 95c984bed1de0d3127bd74855c3ee2a50c921aa7e61c4bdc13661bd2d56ce934d4c696b4480dafcc23592f1aa5a48d4cep_bytes: ff15187146008bf06800000100ff153ctimestamp: 1970-01-01 00:00:00
Version Info:
CompanyName: AO Kaspersky LabFileDescription: wmi helperFileVersion: 21.3.10.391LegalCopyright: © 2021 AO Kaspersky Lab. All Rights Reserved.LegalTrademarks: Registered trademarks and service marks are the property of their respective ownersProductName: Kaspersky Anti-VirusProductVersion: 21.3.10.391InternalName: wmicmdOriginalFilename: wmicmd.EXETranslation: 0x0409 0x04b0

Win32/Kryptik.HNWB also known as:

Lionic	Trojan.Win32.SelfDel.trXJ
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.38488078
FireEye	Generic.mg.e48d3212609d5eb9
CAT-QuickHeal	Trojan.Convagent
ALYac	Trojan.GenericKD.38488078
Malwarebytes	Trojan.Clipper
Sangfor	Trojan.Win32.SelfDel.hwsy
K7AntiVirus	Trojan ( 0058c5841 )
Alibaba	Trojan:Win32/SelfDel.0b242774
K7GW	Trojan ( 0058c5841 )
BitDefenderTheta	Gen:NN.ZexaF.34212.lr1@aaiQ@Mci
Cyren	W32/Trojan.HEE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HNWB
TrendMicro-HouseCall	Trojan.Win32.SELFDEL.USMANLS21
Kaspersky	Trojan.Win32.SelfDel.hwsy
BitDefender	Trojan.GenericKD.38488078
Avast	Win32:CrypterX-gen [Trj]
Tencent	Win32.Trojan.Selfdel.Ajvh
Ad-Aware	Trojan.GenericKD.38488078
Emsisoft	Trojan.GenericKD.38488078 (B)
Comodo	Malware@#344g8bcr1r2ae
Zillya	Trojan.Kryptik.Win32.3683740
TrendMicro	Trojan.Win32.SELFDEL.USMANLS21
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Jiangmin	Trojan.Selfdel.tsr
MaxSecure	Trojan.Malware.1728101.susgen
Avira	TR/Redcap.qyiog
MAX	malware (ai score=86)
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik!ml
GData	Trojan.GenericKD.38488078
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R462852
Acronis	suspicious
McAfee	GenericRXAA-FA!E48D3212609D
VBA32	TrojanBanker.Convagent
APEX	Malicious
Rising	Trojan.Kryptik!8.8 (CLOUD)
Yandex	Trojan.Kryptik!Oeu87L2z618
Ikarus	Trojan-Spy.Win32.CoinStealer
eGambit	PE.Heur.InvalidSig
Fortinet	W32/Agent_AGen.LW!tr
Webroot	W32.Trojan.Gen
AVG	Win32:CrypterX-gen [Trj]
Panda	Trj/Agent.ASH
CrowdStrike	win/malicious_confidence_100% (W)