File Name | Windows Activator by Muki v2.0.exe |
File Type |
PE32+ executable (console) x86-64, for MS Windows
|
Scanner Version | 1.0.220.174 |
Database Version | 2025-07-15 14:00:21 UTC |
Malware family: Patcher
Hash Type | Value | Action |
---|---|---|
MD5 |
46f5e7eb55a748a4bdfe11060f0b1886
|
|
SHA1 |
61ad2e7c88012e94e51a4550c766128805d2616a
|
|
SHA256 |
2a66f9a30e3068c0b45fc38412a60f8728c062df9337e69de1f84ceabbd30260
|
|
SHA512 |
c31853ae78e436526f8035534cc791b272b2ff7204a391c8f34e713245f5472da94e44662d69ac8ea3adad77f3fb35f567f29cdf99166f474c28bc0d5c957251
|
|
ImpHash |
7b7b366c6d4bea4a46a8f75a9d65c2aa
|
Icon |
Hash: ce1ba57805533502b44c1775389c6664
Fuzzy: fba2620c1b47f75dbe487f362731cde0 dHash: 80a4a6a6e6e6e680 |
Image Base | 0x140000000 |
Entry Point | 0x140001000 |
Compilation Time | 2014-08-02 11:33:12 |
Checksum | 0x00000000 (Actual: 0x00036fc4) |
OS Version | 4.0 |
PEiD Signatures |
PE32+ executable (console) x86-64, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
8 libraries
msvcrt, KERNEL32, OLE32, SHELL32, SHLWAPI, USER32, GDI32, COMCTL32 |
Exports | 0 functions |
Resources | 13 Resources |
Sections | 6 Sections |
CompanyName | Muki |
FileDescription | Windows Activator |
FileVersion | 2,0,0,1 |
ProductName | Windows Activator |
InternalName | Windows Activator |
ProductVersion | 2.0.0.1 |
LegalCopyright | Muki |
Translation | 0x0000 0x04e4 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.code |
0x00001000 |
10,198 bytes | 10,240 bytes | 5.57 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
21BF69BA18A6C97AEF224C32196F80D8 |
.text |
0x00004000 |
28,658 bytes | 28,672 bytes | 6.27 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
F645311E8ABCFF800494B9424B3D6FCE |
.pdata |
0x0000b000 |
1,896 bytes | 2,048 bytes | 4.21 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
026AD131EDB6859394DF992DCBBECC0F |
.rdata |
0x0000c000 |
3,493 bytes | 3,584 bytes | 6.19 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
371787FEA3E88B4692B1D097253F5823 |
.data |
0x0000d000 |
7,528 bytes | 5,632 bytes | 4.28 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
42F6B00F18A6C6F7B772F0787115442B |
.rsrc |
0x0000f000 |
170,712 bytes | 171,008 bytes | 6.02 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A3C60DD3D9775CEAD3D92D3D3885E2AC |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 6 | 139,418 bytes | |
RT_RCDATA | 4 | 29,125 bytes | |
RT_GROUP_ICON | 1 | 90 bytes | |
RT_VERSION | 1 | 624 bytes | |
RT_MANIFEST | 1 | 668 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Hack.Win64.Patcher.cld without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system