Malware

Win32/Kryptik.HEZL (file analysis)

Malware Removal

The Win32/Kryptik.HEZL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Kryptik.HEZL virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

make.campzephyr.host
create.guitarchange.site

How to determine Win32/Kryptik.HEZL?


File Info:

crc32: 1FBED18B
md5: 8ba6af2ce3b9dd98f2e83aa34040f112
name: 8BA6AF2CE3B9DD98F2E83AA34040F112.mlw
sha1: 958859becc0c49ff4caa6bd89f80d88342722eaa
sha256: 1a5e627ccc4de0b42d906854116807c50dac9e49999d286d95281b5fb05aa1b3
sha512: fbd30cf5ee10d4f6b6d9184cab0c9f197c8cc6f527bcc6fb860b04c4e2e325d19a604500bafe5a12d8c72b05c5ad071f3d9fd2529bcabf7b107358624ee05632
ssdeep: 24576:cJFu8yJz3bXTpetVSmgnJtZ+qgoFwi9xjMg8JkhjCYvh:cP+tjJeHmX86
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Kryptik.HEZL also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0053f6df1 )
LionicAdware.Win32.StartSurf.2!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Heur.Mint.Zamg.1
CylanceUnsafe
ZillyaAdware.StartSurf.Win32.68093
SangforSuspicious.Win32.Save.a
AlibabaAdWare:Win32/StartSurf.3fb173d8
K7GWTrojan ( 0053f6df1 )
Cybereasonmalicious.ce3b9d
CyrenW32/Kryptik.DID.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HEZL
APEXMalicious
AvastWin32:Adware-gen [Adw]
Kasperskynot-a-virus:HEUR:AdWare.Win32.StartSurf.gen
BitDefenderGen:Heur.Mint.Zamg.1
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanGen:Heur.Mint.Zamg.1
TencentMalware.Win32.Gencirc.114d4f1f
Ad-AwareGen:Heur.Mint.Zamg.1
SophosIStartSurfInstaller (PUA)
BitDefenderThetaGen:NN.ZexaF.34236.AsW@aWmM3aii
McAfee-GW-EditionPacked-FKC!8BA6AF2CE3B9
FireEyeGeneric.mg.8ba6af2ce3b9dd98
EmsisoftGen:Heur.Mint.Zamg.1 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Generic.ASMalwS.28C6116
MicrosoftPWS:Win32/Zbot!ml
ArcabitTrojan.Mint.Zamg.1
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.StartSurf.gen
GDataGen:Heur.Mint.Zamg.1
McAfeePacked-FKC!8BA6AF2CE3B9
MAXmalware (ai score=88)
VBA32BScope.Adware.Prepscram
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIQX!tr
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove Win32/Kryptik.HEZL?

Win32/Kryptik.HEZL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment