HackTool:Win32/ProductKey (file analysis)

The HackTool:Win32/ProductKey is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/ProductKey virus can do?

Unconventionial language used in binary resources: Hebrew
Collects information to fingerprint the system

How to determine HackTool:Win32/ProductKey?


File Info:
crc32: 59CD74DE
md5: 29230c2cf5981e79d9877d4ff74a45c0
name: 29230C2CF5981E79D9877D4FF74A45C0.mlw
sha1: 90fa63c2f3099a6967057efb7bf3a36c42d357c3
sha256: 018c3464a8b8faea2f07edb014ae836f7ab1fab2833b3f7ceacd55a94d78f9d7
sha512: 8faa5dba6f8533ab88c8ee798c6bbb21dce76551b3a333a11d43b30b4331bcd7e729ac2035be172afd7089a4accb9e006faa53234493c94240b2f17efc9af759
ssdeep: 1536:Fpz6Fi2iZ6O1KIeppzEWVQMPeVCHGmbK1KwsXo2GveEe:FoFiHZ8IR+v0C1bQsTGveEe
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2005 - 2021 Nir Sofer
FileVersion: 1.95
CompanyName: NirSoft
ProductName: *ProduKey*
ProductVersion: 1.95
FileDescription: Shows Windows / Office product keys stored in the Registry
Translation: 0x0409 0x04b0

HackTool:Win32/ProductKey also known as:

Bkav	W32.AIDetectVM.malware1
K7AntiVirus	Unwanted-Program ( 004c992d1 )
Cynet	Malicious (score: 100)
Cylance	Unsafe
K7GW	Unwanted-Program ( 004c992d1 )
Cyren	W32/Application.NJPS-8194
ESET-NOD32	a variant of Win32/PSWTool.ProductKey.C potentially unsafe
APEX	Malicious
Alibaba	HackTool:Win64/ProductKey.17a96c50
Comodo	ApplicUnwnt@#24tfsrn9zjdul
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Tool-PassView.b
FireEye	Generic.mg.29230c2cf5981e79
Microsoft	HackTool:Win32/ProductKey
Arcabit	Application.Nirsoft
GData	Win32.Application.Agent.DVE15Z
McAfee	Tool-PassView.b
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_GEN.R049H09AU21
Rising	Trojan.Generic@ML.80 (RDML:rCBqGCX2wGc0O07pzOXK/w)
Yandex	Trojan.Igent.bVfEa5.16
Fortinet	Riskware/Generic_PUA_JA
Paloalto	generic.ml

How to remove HackTool:Win32/ProductKey?

HackTool:Win32/ProductKey removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X