home

patch.exe

The application patch.exe has been detected as a potentially unwanted program by 27 anti-malware scanners.
MD5:
be251c4d36c3e49ddf52d5522884706a

SHA-1:
c9da3a4fe1a3b3ee5bbdbbf09cc9d09d4cbe28a8

SHA-256:
ae602054b4190839a322d6765a283c16fe7868fbbeb41fd77841d73bb89fb373

Scanner detections:
27 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 8:23:15 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Agent
7.1.1

AhnLab V3 Security
Win-Trojan/Agent.1406464
2014.06.05

AVG
Agent
2015.0.3398

Baidu Antivirus
Trojan.Win32.Agent
4.0.3.14729

Bkav FE
W32.Clodf49.Trojan
1.3.0.4959

Comodo Security
TrojWare.Win32.Agent.wjm
18436

Dr.Web
Trojan.MulDrop3.37224
9.0.1.0210

ESET NOD32
Win32/HackTool.Patcher (variant)
8.9893

F-Prot
W32/Trojan2.MCAP
v6.4.7.1.166

IKARUS anti.virus
not-a-virus.Patch.CuteFTP
t3scan.1.6.1.0

K7 AntiVirus
Backdoor
13.1712305

Kaspersky
Trojan.Win32.Agent
14.0.0.3486

Malwarebytes
Trojan.Agent
v2014.07.29.06

McAfee
Generic.dx
5600.7054

Microsoft Security Essentials
HackTool:Win32/Patcher
1.10600

NANO AntiVirus
Trojan.Win32.Agent.cwgxvw
0.28.0.60100

Norman
Patcher.IW
11.20140729

nProtect
Trojan/W32.Agent.1406464
14.06.04.01

Panda Antivirus
Trj/CI.A
14.07.29.06

Quick Heal
HackTool.Patcher.A
7.14.14.00

Rising Antivirus
PE:Trojan.Win32.Generic.12AC3D5F!313277791
23.00.65.14727

Sophos
Mal/Generic-L
4.98

Total Defense
Win32/Sipay.W
37.0.10978

Trend Micro House Call
CRCK_PATCH
7.2.210

Trend Micro
CRCK_PATCH
10.465.29

VIPRE Antivirus
Trojan.Win32.Generic
29938

ViRobot
Trojan.Win32.S.Agent.1406464
2011.4.7.4223

File size:
1.3 MB (1,406,464 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\globalscape\cuteftp 8 professional\patch.exe

File PE Metadata
Compilation timestamp:
8/20/2007 4:16:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
24576:QAWRyCUd0KeHjj+0oMYYqO6Pclg1ABRzOEritL590x9haQV:Q14aKG+0oMlb6PclIAzzRr+Ej

Entry address:
0x280E

Entry point:
B8, 64, B6, 8A, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 13, 02, 94, 4C, 2F, 2B, 07, 9F, 67, D5, A7, 6D, A3, FB, F1, BC, 26, 28, CC, 8C, 67, 5E, E9, D7, 10, 71, AB, 76, A0, 3D, 08, E5, 84, 0C, 13, A1, C5, 61, 07, 83, 22, 98, 34, CD, FD, CC, 99, BD, E1, EA, 64, 1B, 2E, B0, 68, A3, 53, DF, 69, 05, 5A, 2E, 3A, 9F, 5C, 6B, 2F, 57, C1, A0, 27, 48, 0E, E3, F6, A9, 9D, BA, 5D, D8, 4D, F9, 99, 15, 00, DE, 0D, 80, 09, E5, 7F, 13, BF...
 
[+]

Entropy:
7.9894

Packer / compiler:
PECompact v2

Code size:
10.5 KB (10,752 bytes)

Remove patch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.