File Name | adobe.acrobat.xi.pro.patch-MPT.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
|
Scanner Version | 1.0.216.174 |
Database Version | 2025-05-02 20:00:12 UTC |
Malware family: Patcher
Hash Type | Value | Action |
---|---|---|
MD5 |
ed57c6456d4fba457407d5652e5a52e3
|
|
SHA1 |
8f34bb9503dc54a9452821391d923fa19ce6e6fa
|
|
SHA256 |
46067bcde7fb1006430f97c286d7ac8de915315291c6c542567ae73939f848c8
|
|
SHA512 |
fcbd1b65c1fc6d4b93c61fc8403edfedcf456d76863de3914108a1cb1cb003d919adccadc1d908acd84956dfbc80a16d8b211635ae5e4a4457dc2ae3ff2a38e5
|
|
ImpHash |
09d0478591d4f788cb3e5ea416c25237
|
Icon |
Hash: 0db4caecd66a2e9a35fdbdff79f615e0
Fuzzy: 33d10757fba1308600c757c609cf43d0 dHash: b96d71b052525252 |
Image Base | 0x00400000 |
Entry Point | 0x00403d86 |
Compilation Time | 2011-03-12 20:47:00 |
Checksum | 0x000c6e34 (Actual: 0x000c6e34) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
|
Digital Signature | No valid SignedData structure was found. |
Imports |
1 libraries
kernel32 |
Exports | 0 functions |
Resources | 27 Resources |
Sections | 2 Sections |
CompanyName | MPT34M |
FileVersion | 1.0 |
FileDescription | cr4cking th3 cod3 4 fun! |
InternalName | MPT34M |
LegalCopyright | © MPT |
LegalTrademarks | |
OriginalFilename | Activator |
ProductName | Activator |
ProductVersion | 1.0 |
Translation | 0x0409 0x04e4 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
1,695,744 bytes | 742,400 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D37F268E80B9D6D12599033733050381 |
.rsrc |
0x0019f000 |
20,480 bytes | 16,896 bytes | 4.32 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
C4E978B871AD82D811B5099F5AC4CC0B |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_CURSOR | 1 | 308 bytes | |
RT_BITMAP | 4 | 133,408 bytes | |
RT_ICON | 1 | 9,640 bytes | |
RT_DIALOG | 3 | 824 bytes | |
RT_STRING | 4 | 2,284 bytes | |
RT_RCDATA | 9 | 1,421,439 bytes | |
RT_GROUP_CURSOR | 1 | 20 bytes | |
RT_GROUP_ICON | 2 | 40 bytes | |
RT_VERSION | 1 | 700 bytes | |
RT_MANIFEST | 1 | 948 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Hack.Win32.Patcher.ns without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system