While some "activator" tools are technically not viruses (they only patch licensing), dg-msactivator.exe consistently shows beyond activation. Even if one variant only activates Office, another will drop a miner.

Some reverse-engineered samples contain strings like:

This is an interesting request because is not a legitimate Windows file. It is a well-known false flag or generic name used by malware, hack tools, and "crack" activators—specifically for Microsoft Office and Windows .