Win32/Kryptik.HREN removal

The Win32/Kryptik.HREN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.HREN virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Authenticode signature is invalid
CAPE detected the RedLine malware family

How to determine Win32/Kryptik.HREN?


File Info:
name: 6611C9E5BE3C355CC31E.mlw
path: /opt/CAPEv2/storage/binaries/d0c85bc373f280dc954f0675643caf7885be3f62040cabb127af66078d8a0cd5
crc32: 4AA29570
md5: 6611c9e5be3c355cc31ead34caf9fafa
sha1: c2d424c78be25df7d527fcf6958b207e7637e460
sha256: d0c85bc373f280dc954f0675643caf7885be3f62040cabb127af66078d8a0cd5
sha512: 5bd83566eb0ff8181417f25528e643bf3b1e56143be06654a0f6445d4a774f787cf89e18882977ace9f3b0c21f62ee9f0a5ebacb9422a53c1d95d337772f2431
ssdeep: 12288:lKrVxteiEkEiW7L1cl+BqeiBx+quBZxdJ6U13upm8OHy:MEiu1zBqlx+Z6U1eI8OS
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T12CA49E20B981CC32DB7234354770D2B1CCBD783069A29ADB539D5A7B5F30A81DA2976F
sha3_384: 48e7e3fdbc37dbd208b71024dcf6f066ee519790a2a48e7421f678f4d68737e809a812d8a2aecacc7aa43d32131324ab
ep_bytes: e836080000e917feffff558bec6a00ff
timestamp: 2022-11-09 19:28:22

Version Info:
0: [No Data]

Win32/Kryptik.HREN also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Stealer.12!c
Elastic	malicious (high confidence)
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Alibaba	Trojan:Win32/runner.ali1000123
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HREN
APEX	Malicious
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.pef
Avast	Win32:PWSX-gen [Trj]
Tencent	Win32.Trojan-Spy.Stealer.Qimw
DrWeb	Trojan.PWS.StealerNET.125
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.6611c9e5be3c355c
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!6611C9E5BE3C
Rising	Trojan.Generic@AI.98 (RDML:cb8sJkcvjuXJZ/XfkFm81A)
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:PWSX-gen [Trj]

How to remove Win32/Kryptik.HREN?

Win32/Kryptik.HREN removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X