Application.HackTool.198 removal

The Application.HackTool.198 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.HackTool.198 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Application.HackTool.198?


File Info:
name: 9255A493EC17831C505C.mlw
path: /opt/CAPEv2/storage/binaries/1a82663d3c5b2c778009b1ecf0e9579a2aa73725a0356a8f31723d1a44a1049e
crc32: DFE9449B
md5: 9255a493ec17831c505c79ed9277d3fb
sha1: 71cbaeff50061b2ccaf00e3bc77e8e457b71d339
sha256: 1a82663d3c5b2c778009b1ecf0e9579a2aa73725a0356a8f31723d1a44a1049e
sha512: cff6dfe858ce09af550b74dffd90e7d3515ad0df3e0ccb86ad9f34d81fe9d93390999c011a831ea4aed7190cfa1366987c2ba61cea31f4d6cb2a8b2beee1c1bd
ssdeep: 24576:uVYMaQAvc35UFukttVQI0DfSVgPCS3tMrMyj3F9hIF1SqY5cbaF:OIrvcJ5kttV2zSVE3tMx3FE1S0W
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17925AD1172D181B5E0B226706E7D9B769AF9FC210B3286DF57806A2D4F34FE12D32726
sha3_384: 6808632fd77eabe85b363f738666b3eae6a1c93b9be2ecedae96596377c3bf765191a54435d075c92c94a938237e3e92
ep_bytes: e82c070000e97afeffff558beceb0dff
timestamp: 2022-01-10 13:14:20

Version Info:
FileDescription: PE injector
FileVersion: 2.3.2.0
InternalName: Xenos.exe
LegalCopyright: Copyright (C) 2017
OriginalFilename: Xenos.exe
ProductName: Xenos
ProductVersion: 2.3.2.0
Translation: 0x0400 0x04b0

Application.HackTool.198 also known as:

MicroWorld-eScan	Gen:Variant.Application.HackTool.198
FireEye	Generic.mg.9255a493ec17831c
McAfee	GenericRXJN-GA!9255A493EC17
K7AntiVirus	Unwanted-Program ( 005323b21 )
K7GW	Unwanted-Program ( 005323b21 )
Cybereason	malicious.3ec178
BitDefenderTheta	Gen:NN.ZexaF.34182.9q0@ayUDo8nO
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GameHack.CBV potentially unsafe
Avast	Win64:PUP-gen [PUP]
BitDefender	Gen:Variant.Application.HackTool.198
Emsisoft	Gen:Variant.Application.HackTool.198 (B)
McAfee-GW-Edition	GenericRXJN-GA!9255A493EC17
Sophos	Generic ML PUA (PUA)
MAX	malware (ai score=70)
Antiy-AVL	Trojan/Generic.ASMalwS.2B56956
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Application.HackTool.198
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.R370956
VBA32	BScope.Trojan.Wacatac
ALYac	Gen:Variant.Application.HackTool.198
Malwarebytes	Trojan.Injector
Rising	HackTool.BlackBone!1.D7EA (CLASSIC)
Yandex	Trojan.NtRootKit!AJdaIOBTk3E
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Kryptik.GAMH!tr
AVG	Win64:PUP-gen [PUP]
MaxSecure	Trojan.Malware.91421029.susgen

How to remove Application.HackTool.198?

Application.HackTool.198 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X