home

embarcadero.rad.studio.xe2.(update.4)-patch.exe

The executable embarcadero.rad.studio.xe2.(update.4)-patch.exe has been detected as malware by 16 anti-virus scanners.
MD5:
d0fc1581bf23fc15604d1dda6c0c841f

SHA-1:
6c7a9e1ea00ed4ec985874a74d109a2335fef942

SHA-256:
973494a1ad96825079ed1d37ec3a47411a49021d836ef8b8305aca0276e51544

Scanner detections:
16 / 68

Status:
Malware

Analysis date:
4/26/2024 1:50:48 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic26
2015.0.3313

Baidu Antivirus
Trojan.Win32.Agent
4.0.3.141022

Bkav FE
W32.Clod828.Trojan
1.3.0.4959

Clam AntiVirus
Hacktool.Crack.Lo-Fi
0.98/21411

Comodo Security
UnclassifiedMalware
19829

ESET NOD32
Win32/HackTool.Patcher (variant)
8.10581

Fortinet FortiGate
W32/SPNR.03IJ12!tr
10/22/2014

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.7.8.0

Malwarebytes
PUP.Hacktool.Patcher
v2014.10.22.02

McAfee
Generic PUP.x!ch3
5600.6969

Norman
keygen.X
11.20141022

Sophos
Generic Patcher
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-HackPatch
10284

Trend Micro House Call
TROJ_SPNR.03IJ12
7.2.295

Trend Micro
TROJ_SPNR.03IJ12
10.465.22

VIPRE Antivirus
Trojan.Win32.Generic
34020

File size:
55 KB (56,320 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
10/19/2011 7:04:25 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:qGkcsmBxnIWl9+Qtl97yKixzPla/1lxC+oU0ODb5C:qGk7Wl9+Qtl97rixzPla/1lxC+oU0ODQ

Entry address:
0x20C0

Entry point:
E8, B1, 1F, 00, 00, 6A, 00, E8, 06, 48, 00, 00, A1, A6, D8, 40, 00, C3, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 55, 8B, EC, 83, C4, F0, 56, 57, 53, 8D, 7D, F0, 57, FF, 75, 08, E8, 4B, 00, 00, 00, 33, DB, EB, 23, EB, 2A, 80, 3E, 18, 75, 1C, 6A, 10, 8D, 46, 01, 50, 57, E8, 84, 00, 00, 00, 0B, C0, 74, 0C, 8B, C6, 83, C0, 11, 5B, 5F, 5E, C9, C2, 04, 00, 43, 53, E8, 55, F3, FF, FF, 8B, F0, 0B, F6, 75, D2, 33, C0, 5B, 5F, 5E, C9, C2, 04, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00...
 
[+]

Entropy:
6.3458

Code size:
38 KB (38,912 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.