Categories: Malware

Win32/Kryptik.HTUE removal instruction

The Win32/Kryptik.HTUE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Kryptik.HTUE virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the RedLine malware family
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/Kryptik.HTUE?


File Info:
name: 16A6F267B90BF595ACBF.mlwpath: /opt/CAPEv2/storage/binaries/a419e39462c31776ca55fcb9f0ad0482f62afbfbd53cc943073dbba412040085crc32: 5943AEFBmd5: 16a6f267b90bf595acbfc1fbbf3ea2easha1: d00e7cbe9106d0cbbe560f176791d3e13736b3bdsha256: a419e39462c31776ca55fcb9f0ad0482f62afbfbd53cc943073dbba412040085sha512: fe0e56ad9af0e65760f45577c399ff8067f0009377b143a369bb8cd16fb3db68e2e6d71585fd52067c723dceb520d825e7c1b2156702dbca81e07404a1e45563ssdeep: 3072:tLfm46rNcccfHr0ycKpNd2tZyx+VWQZZAQHC/TSoldwqiYof4v9xnTxe:SrW0BKpNdh/QZZbHYSoldwPhtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T124444C39D8709A29EA4D7FF08BF39B98281D6E2007480587BE4E1E558B5FFF42467253sha3_384: f7d9a2a770f5deb867ffc4d4c041ec0bbb2cee922d27efe8740e9e9cde068b109d23e017b62a26a224854d7083bc719dep_bytes: e807300000e9a4feffff3b0d04b34300timestamp: 2023-06-12 09:37:26
Version Info:
Comments: Il s'agit d'une application légitime.CompanyName: Schneider Electric SEFileDescription: Schneider Electric SE ProduitFileVersion: 381InternalName: ApplicationInterneLegalCopyright: Droit d'auteur Â© Schneider Electric SE Tous droits réservés.LegalTrademarks: Marques déposées Â© Schneider Electric SEOriginalFilename: app.exeProductName: ApplicationProductVersion: 381Translation: 0x0407 0x04b0

Win32/Kryptik.HTUE also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.124942
FireEye	Generic.mg.16a6f267b90bf595
ALYac	Gen:Variant.Midie.124942
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HTUE
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.gen
BitDefender	Gen:Variant.Midie.124942
Avast	Win32:PWSX-gen [Trj]
VIPRE	Gen:Variant.Midie.124942
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Midie.124942 (B)
Ikarus	AdWare.Lollipop
GData	Gen:Variant.Midie.124942
MAX	malware (ai score=83)
Arcabit	Trojan.Midie.D1E80E
ZoneAlarm	HEUR:Trojan-Spy.Win32.Stealer.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R586292
Panda	Trj/Genetic.gen
SentinelOne	Static AI – Suspicious PE
MaxSecure	Spy.W32.Stealer.gen_269358
BitDefenderTheta	AI:Packer.FFB3131320
AVG	Win32:PWSX-gen [Trj]
DeepInstinct	MALICIOUS