About “HackTool.Extrim” infection

The HackTool.Extrim is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool.Extrim virus can do?

Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine HackTool.Extrim?


File Info:
name: F0DD446EA1CD4BA84BBA.mlw
path: /opt/CAPEv2/storage/binaries/1710ff987e7c9c3681c2ac0437358dadefd766933d9e1ec9ec267f8d29634690
crc32: C3CBCCCF
md5: f0dd446ea1cd4ba84bba0d865478dfe8
sha1: f01cef8430b6f2110611fcad0694dfc8d3cf875d
sha256: 1710ff987e7c9c3681c2ac0437358dadefd766933d9e1ec9ec267f8d29634690
sha512: 9228f1d00d569db267d046a065f3ed627f21d06c1758a7c43d1728a1d23f539474f7b8ef818d4150480ba3fc1fa37819a3b3328e58290a6b8823dad71f51c966
ssdeep: 98304:fVz62q18oyYdbo5LXDxQjSQvngZhxGIb0nk5JpQBKCY5yg07WyavdK+tB8NKL/EA:kfto5zOzn6GIKeYsyZK1B8CaSj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F376231372924034F1A209329A777F95A17A7F644F90A4FB33D868DA2B359D0BD72B13
sha3_384: d49058e4a437a01f04b3d67f3213a4589b34d7b0710689b29dc6e8829478d262517086677e2647f873dc12bdd689004e
ep_bytes: e829080000e97afeffff8b4df464890d
timestamp: 2021-05-22 12:56:17

Version Info:
CompanyName: TODO: Extrim
FileDescription: TODO: Extrim free version
FileVersion: 1.0.0.1
InternalName: Loader.exe
LegalCopyright: Copyright (C) 2020
OriginalFilename: Loader.exe
ProductName: TODO: Extrim
ProductVersion: 1.0.0.1
Translation: 0x0419 0x04b0

HackTool.Extrim also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Razy.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Application.Hacktool.ATH
CAT-QuickHeal	PUA.ExtrimRI.S22849338
ALYac	Application.Hacktool.ATH
Malwarebytes	HackTool.Extrim
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Unwanted-Program ( 00568e2f1 )
K7GW	Unwanted-Program ( 00568e2f1 )
Cybereason	malicious.ea1cd4
Cyren	W32/Trojan.GCW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GameHack.DIE potentially unsafe
APEX	Malicious
Paloalto	generic.ml
BitDefender	Application.Hacktool.ATH
Avast	Win32:WormX-gen [Wrm]
Ad-Aware	Application.Hacktool.ATH
Emsisoft	Application.Hacktool.ATH (B)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R067C0PFN21
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
FireEye	Generic.mg.f0dd446ea1cd4ba8
Sophos	Mal/Generic-S (PUA)
GData	Application.Hacktool.ATH
Avira	HEUR/AGEN.1140065
Antiy-AVL	Trojan/Generic.ASMalwS.331A115
Arcabit	Application.Hacktool.ATH
Microsoft	Trojan:Win32/Sabsik!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R416904
McAfee	GenericRXOW-XR!F0DD446EA1CD
MAX	malware (ai score=75)
Cylance	Unsafe
TrendMicro-HouseCall	TROJ_GEN.R067C0PFN21
Rising	Trojan.Vigorf!8.EAEA (RDMK:cmRtazrxUHQfaIX5cb5eWGGkN1k6)
Yandex	Riskware.Agent!PpF9569YqNQ
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	Riskware/GameHack
AVG	Win32:WormX-gen [Wrm]
Panda	Trj/Genetic.gen
MaxSecure	Trojan.Malware.300983.susgen

How to remove HackTool.Extrim?

HackTool.Extrim removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X