Crack

How to remove “HackTool.Keygen”?

Malware Removal

The HackTool.Keygen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool.Keygen virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with MPRESS
  • Authenticode signature is invalid

How to determine HackTool.Keygen?


File Info:

name: 3A1DB911D2134E86900A.mlw
path: /opt/CAPEv2/storage/binaries/8c44c6f763f8a1c099bd934ed73c990c6a0dbe219631b8bc8d55e0118c8c2415
crc32: 1393898B
md5: 3a1db911d2134e86900a3a23e3b6038b
sha1: e3da3b0711846878f980aa431fd14fe2d174719b
sha256: 8c44c6f763f8a1c099bd934ed73c990c6a0dbe219631b8bc8d55e0118c8c2415
sha512: aab44a2582ae07397d1a40fbd27596f8b71b6470cc88b6e223147b14372ebbfb0e2487ae9dec4600c7e28053fe61244fd3988733d32233df8b4ca6da81a4e002
ssdeep: 3072:97eSdNxeWLDRiwwBbsL/iMFOfoziE+jCypGkM+3TgpVy:BxdN8WLtiwwxsL/IgzijtGx+3Tq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B4F3224FD75EC51AE00D2233DB82D89995D9AD0A9188C4CF93ED6C3F7A68776A0135C3
sha3_384: acfb675e12cef2ae47c8523a701e38d68a8e4b559452f30be37fa0b7a09ed5e72c5f540f06a1e0980b927492b9201ee6
ep_bytes: 60e80000000058055a0b00008b3003f0
timestamp: 2011-04-06 02:42:09

Version Info:

CompanyName: UUK
FileDescription: Keygen for Sandboxie [modified]
FileVersion: 1.0.0.1
InternalName: Keygen.exe
LegalCopyright: Copyright (C) 2011
OriginalFilename: Sandboxie.exe
ProductName: Keygen
ProductVersion: 1.0.0.1
Translation: 0x0804 0x04b0

HackTool.Keygen also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
FireEyeGeneric.mg.3a1db911d2134e86
CylanceUnsafe
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/HackTool.Patcher.DI potentially unsafe
APEXMalicious
CynetMalicious (score: 100)
SUPERAntiSpywareHack.Tool/Gen-Patcher
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.cc
Trapminemalicious.high.ml.score
SophosKeygen (PUA)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.acyqr
WebrootW32.Malware.gen
Antiy-AVLTrojan/Generic.ASMalwS.3C54
AhnLab-V3Unwanted/Win32.KeyGen.C1432571
McAfeeGenericRXAA-AA!3A1DB911D213
VBA32Backdoor.IRC.Bot
MalwarebytesHackTool.Keygen
YandexTrojan.GenAsa!pTc6YM8NY2k
MaxSecureTrojan.Malware.300983.susgen
BitDefenderThetaGen:NN.ZexaF.34606.jmuaauMN0Gnj
Cybereasonmalicious.711846

How to remove HackTool.Keygen?

HackTool.Keygen removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment