Win32/Kryptik.IML malicious file

The Win32/Kryptik.IML is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Kryptik.IML virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Kryptik.IML?


File Info:
name: FAE8E54F18047DF362F2.mlw
path: /opt/CAPEv2/storage/binaries/32452ba1d099eee516cb0f88a9f02c2401f27785ff9b46d52ddb5cc2effccd30
crc32: 46300A61
md5: fae8e54f18047df362f29304bcfa1566
sha1: 0b6afcac9d994ad9861bc0d45722df31aa3c8983
sha256: 32452ba1d099eee516cb0f88a9f02c2401f27785ff9b46d52ddb5cc2effccd30
sha512: 9ad208f2a1386632a44906909fab3923a6b555bc871d4cc71bb716390943c35001c1744af70f82fb79615538fcbee2239854649016d6e48096dab306d58a5950
ssdeep: 1536:Qpnxm6MG9xgfrvEaoiT/GyphjXDYjKwttoswRmhApEL:GnxwgxgfR/DVG7wBpEL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15893C069BF833F9BD0BD8C3759F3746C086835897E407C2A6AB4014B57B590E8F25A78
sha3_384: d3c3b80916e1d56db2259869109f602c5b81f448e62248950dc88dc767ad9836b2a832477b287e31bd0ab3cf4e23baa1
ep_bytes: 558bec83ec2c8165f4000000002b3d99
timestamp: 2002-03-28 06:53:52

Version Info:
CompanyName: Macromedia, Inc.
FileDescription: Shockwave Flash 6.0  r65
FileExtents: swf|spl
FileOpenName: Macromedia Flash movie (*.swf)|FutureSplash movie (*.spl)
MIMEType: application/x-shockwave-flash|application/futuresplash
ProductName: Shockwave Flash
FileVersion: 6,0,65,0
InternalName: Macromedia Flash Player 6.0
LegalCopyright: Copyright © 1996-2002 Macromedia, Inc.
LegalTrademarks: Macromedia Flash Player
OriginalFilename: npswf32.dll
ProductVersion: 6,0,65,0
Translation: 0x0409 0x04b0

Win32/Kryptik.IML also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.ltgH
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.KS.2
FireEye	Generic.mg.fae8e54f18047df3
CAT-QuickHeal	W32.Ramnit.DR
McAfee	W32/Ramnit.y
Cylance	Unsafe
Zillya	Trojan.Krap.Win32.4
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 001f82c71 )
K7GW	Trojan ( 0041ada71 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	AI:Packer.A20BC7AF14
VirIT	Trojan.Win32.Shiru.Z
Cyren	W32/SuspPack.DC.gen!Eldorado
Symantec	Packed.Protexor!gen1
ESET-NOD32	a variant of Win32/Kryptik.IML
TrendMicro-HouseCall	TROJ_DROPPR.SMAL
ClamAV	Win.Malware.Ramnit-6736539-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Trojan.Heur.KS.2
NANO-Antivirus	Trojan.Win32.Lebag.csapu
Cynet	Malicious (score: 100)
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptic
Avast	Win32:GenMalicious-HQA [Trj]
Rising	Trojan.Win32.ZBot.bx (CLASSIC)
Ad-Aware	Gen:Trojan.Heur.KS.2
Emsisoft	Gen:Trojan.Heur.KS.2 (B)
Comodo	TrojWare.Win32.Kryptik.IQC@3nvynu
DrWeb	Trojan.Inject.14349
VIPRE	Gen:Trojan.Heur.KS.2
TrendMicro	TROJ_DROPPR.SMAL
McAfee-GW-Edition	W32/Ramnit.y
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A + Mal/Ramnit-ZZ
APEX	Malicious
GData	Gen:Trojan.Heur.KS.2
Jiangmin	Trojan/Lebag.wb
Avira	TR/Patched.Ren.Gen
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Generic.ASMalwS.3303
Kingsoft	Win32.Heur.KVM011.a.(kcloud)
Microsoft	Trojan:Win32/Orsam!rts
Google	Detected
AhnLab-V3	Trojan/Win32.Ramnit.R7595
VBA32	BScope.Trojan.Inject
TACHYON	Trojan/W32.Krap.95149
Malwarebytes	Generic.Trojan.Malicious.DDS
Ikarus	Trojan.Win32.Lebag
Tencent	Trojan.Win32.Koobface.a
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.LW!tr
AVG	Win32:GenMalicious-HQA [Trj]
Cybereason	malicious.f18047
Panda	W32/Koobface.LO.worm

How to remove Win32/Kryptik.IML?

Win32/Kryptik.IML removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X