HackTool:Win32/Keygen!pz (file analysis)

The HackTool:Win32/Keygen!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/Keygen!pz virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine HackTool:Win32/Keygen!pz?


File Info:
name: A29973C858C7E4E1FB3E.mlw
path: /opt/CAPEv2/storage/binaries/526cb6d7c5040e924c8f495618ef784503cc4e3e34127f2427c4193dc553330f
crc32: BC99984B
md5: a29973c858c7e4e1fb3ecf1a4735e5e4
sha1: 38baafd730892c0d8b6e2bb4687a24a20d6c3e03
sha256: 526cb6d7c5040e924c8f495618ef784503cc4e3e34127f2427c4193dc553330f
sha512: c596e9be690db1ba226f4768f3f6bceff1932e621396fc04d377fd8aca8d661d0fec5d76388e82f063c9783244e0813b7a8f721bf1d1cb61beac20b7122c9a14
ssdeep: 24576:3etYknRP5dJhVjdHa4OnzLQWVivxDUhKG0YYqYiZZjAOV26:38fRBdXR8HBipDUoPujZV26
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AC45332F7F8CE6F1D5278E7CC0213A46BDC8505F863729B084E9A4DB0958F25568B7A8
sha3_384: 3e7270746ab7becc6b21d207a23518ffc54c58a428af2b802439056a8087b0d207547a6bd0df6884af9fac78e00e1a84
ep_bytes: b8285d66005064ff3500000000648925
timestamp: 2011-10-30 12:11:57

Version Info:
0: [No Data]

HackTool:Win32/Keygen!pz also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Keygen.4!c
FireEye	Generic.mg.a29973c858c7e4e1
Skyhigh	Artemis!PUP
McAfee	Artemis!A29973C858C7
Sangfor	Trojan.Win32.Keygen.Vi4u
Cybereason	malicious.730892
Symantec	SMG.Heur!gen
ESET-NOD32	Win32/Keygen.HU potentially unsafe
Cynet	Malicious (score: 100)
Sophos	Generic Reputation PUA (PUA)
Trapmine	suspicious.low.ml.score
Ikarus	not-a-virus:Keygen.SuspectCRC
Jiangmin	Trojan/Genome.dace
Google	Detected
Antiy-AVL	Trojan/Win32.Tgenic
Microsoft	HackTool:Win32/Keygen!pz
Varist	W32/SuspPack.N.gen!Eldorado
TrendMicro-HouseCall	TROJ_GEN.R002H05B124
Rising	Trojan.Generic@AI.96 (RDML:J5y3VFs5drKUNNRuWqiomg)
SentinelOne	Static AI – Suspicious PE
Fortinet	Malicious_Behavior.SB
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)

How to remove HackTool:Win32/Keygen!pz?

HackTool:Win32/Keygen!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X