<< Back to Top Threats
K7 Detection Name Affected OS Prevalence AV Definition Version
Trojan ( 005cea261 ) Windows Low 14.12.57257
MD5

30dda01533134140429b99232f41c3c3

SHA256

535cb3c0c052b4e5993bb8ca6e1314010597f286a313fd855fee668c8864ee49

File Size

11,802,706 bytes

Packer Information

N/A

First Seen

07-10-2025

Last Seen

09-10-2025

Aliases

Win32/GenKryptik.HMDB

Behavior Details

1. Dropped files:
SuiteSetup.ini
_isAEB4.exe
Under the folder
C:\Users\\AppData\Local\Temp\{76CE1796-7962-4AF3-A4D7-E5E653805162}

2. Dropped files:
setup.xml
libffi-7.dll
python3.dll
python38.dll
Under the folder
C:\Users\\AppData\Local\Temp\{76CE1796-7962-4AF3-A4D7-E5E653805162}\{70FBDE00}

3. Creates Registry:

Adds registry data
C:\Users\\AppData\Local\Temp\{76CE1796-7962-4AF3-A4D7-E5E653805162}\{70FBDE00}\_isBE16

Under the key:
HKEY_CURRENT_USER\Software\InstallShield\SuiteInstallers\{655431E3-9992-4802-B5F0-96E9BD642EDB}\InfoPath

Removal Instructions

1. Update the copy of K7 security to the latest version.
2. Scan the system completely and remove the detected files.
3. Open Windows registry editor.
4. Delete the registry data
C:\Users\\AppData\Local\Temp\{76CE1796-7962-4AF3-A4D7-E5E653805162}\{70FBDE00}\_isBE16

Under the key:
HKEY_CURRENT_USER\Software\InstallShield\SuiteInstallers\{655431E3-9992-4802-B5F0-96E9BD642EDB}\InfoPath
5. Close the Windows registry.
6. Restart the machine.