| K7 Detection Name | Affected OS | Prevalence | AV Definition Version |
|---|---|---|---|
| Trojan ( 005cea261 ) | Windows | Low | 14.12.57257 |
| MD5 | 30dda01533134140429b99232f41c3c3 |
| SHA256 | 535cb3c0c052b4e5993bb8ca6e1314010597f286a313fd855fee668c8864ee49 |
| File Size | 11,802,706 bytes |
| Packer Information | N/A |
| First Seen | 07-10-2025 |
| Last Seen | 09-10-2025 |
| Aliases | Win32/GenKryptik.HMDB |
Behavior Details
1. Dropped files:
SuiteSetup.ini
_isAEB4.exe
Under the folder
C:\Users\
2. Dropped files:
setup.xml
libffi-7.dll
python3.dll
python38.dll
Under the folder
C:\Users\
3. Creates Registry:
Adds registry data
C:\Users\
Under the key:
HKEY_CURRENT_USER\Software\InstallShield\SuiteInstallers\{655431E3-9992-4802-B5F0-96E9BD642EDB}\InfoPath
Removal Instructions
1. Update the copy of K7 security to the latest version.
2. Scan the system completely and remove the detected files.
3. Open Windows registry editor.
4. Delete the registry data
C:\Users\
Under the key:
HKEY_CURRENT_USER\Software\InstallShield\SuiteInstallers\{655431E3-9992-4802-B5F0-96E9BD642EDB}\InfoPath
5. Close the Windows registry.
6. Restart the machine.