Heur.Mint.Zard.31 (file analysis)

The Heur.Mint.Zard.31 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.Mint.Zard.31 virus can do?

Presents an Authenticode digital signature
Creates RWX memory
The binary likely contains encrypted or compressed data.
Detects Sandboxie through the presence of a library
Checks for the presence of known windows from debuggers and forensic tools
Network activity detected but not expressed in API logs
Checks the version of Bios, possibly for anti-virtualization
Detects VirtualBox through the presence of a registry key
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Heur.Mint.Zard.31?


File Info:
crc32: 0096392E
md5: 08ba3532c77b06d12f71011150e256b0
name: cr.exe
sha1: ef0ada901819c56b86002f620da9b4efe30982ef
sha256: b9fe891909d19f047f747760b52a1801745c5748844d6dfe56e6d3b81e24c67d
sha512: c3002e185310ff0fda178359d3f4d244168765d6b27f19f131db55d5a4a84a6b24189efa4283f399ba611b0ae0ecf5c94b2ec0289101a62e6ab0fd62337cd397
ssdeep: 98304:3XeRA+0Xum1Z54/wyHLDPOQpa9rdn5sZ255eVCKSWGbekQepZRbhu+Nc:ei+0XuyQrS08rhK2qcb9/pdG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Heur.Mint.Zard.31 also known as:

Bkav	W32.HfsAutoB.
MicroWorld-eScan	Gen:Heur.Mint.Zard.31
FireEye	Gen:Heur.Mint.Zard.31
BitDefender	Gen:Heur.Mint.Zard.31
Cybereason	malicious.2c77b0
TrendMicro	Possible_Virus
BitDefenderTheta	AI:Packer.5F487C921D
ESET-NOD32	a variant of Win32/GenKryptik.EBJT
TrendMicro-HouseCall	Possible_Virus
Kaspersky	HEUR:Trojan-Banker.Win32.ClipBanker.pef
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
Rising	Dropper.Agent!8.2F (TFE:dGZlOgXTrLXhMO11RQ)
Ad-Aware	Gen:Heur.Mint.Zard.31
Invincea	heuristic
Trapmine	malicious.moderate.ml.score
SentinelOne	DFI – Suspicious PE
GData	Gen:Heur.Mint.Zard.31
Jiangmin	Trojan.Banker.ClipBanker.nd
Avira	TR/Crypt.XPACK.Gen2
MAX	malware (ai score=80)
Microsoft	Trojan:Win32/Wacatac.D!ml
Endgame	malicious (high confidence)
Arcabit	Trojan.Mint.Zard.31
AhnLab-V3	PUP/Win32.RL_Generic.R309588
ZoneAlarm	HEUR:Trojan-Banker.Win32.ClipBanker.pef
ALYac	Gen:Heur.Mint.Zard.31
Ikarus	Trojan.Win64.Themida
eGambit	PE.Heur.InvalidSig
Fortinet	W32/GenKryptik.EBJT!tr
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Heur.Mint.Zard.31?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Heur.Mint.Zard.31 (file analysis)