home

patch.exe

The application patch.exe, “Patch created by Tola's Patching Engine” has been detected as a potentially unwanted program by 28 anti-malware scanners.
Description:
Patch created by Tola's Patching Engine

Version:
2.03

MD5:
aaf1f749999022794ca7859d41bec59c

SHA-1:
f435f5c130ba9e7bc3f58b2ff587a2f7d57575dc

Scanner detections:
28 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 12:11:15 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Aseye.DMR
927

Agnitum Outpost
Trojan.Tool
7.1.1

AhnLab V3 Security
Unwanted/Win32.Patch
14.07.22

Avira AntiVirus
SPR/Tool.Aseye.DMR
7.11.138.30

Baidu Antivirus
Trojan.Win32.TPE
4.0.3.14722

Bitdefender
Application.Aseye.DMR
1.0.20.1015

Comodo Security
Backdoor.Win32.Agent.ZAC
17965

Dr.Web
Tool.ASEye.2
9.0.1.0203

ESET NOD32
Win32/Tool.TPE (variant)
8.9569

Fortinet FortiGate
Riskware/TolasPE
7/22/2014

F-Prot
W32/Tola.A.gen
v6.4.7.1.166

F-Secure
Application.Aseye.DMR
11.2014-22-07_3

G Data
Application.Aseye.DMR
14.7.24

IKARUS anti.virus
Trojan.Feutel.AV
t3scan.2.2.29

Malwarebytes
RiskWare.Tool.CK
v2014.07.22.01

McAfee
Tool-TPatch
5600.7061

Microsoft Security Essentials
Trojan:Win32/Trafog!rts
1.10401

MicroWorld eScan
Application.Aseye.DMR
15.0.0.609

NANO AntiVirus
Riskware.Win32.ASEye.cjxuqg
0.28.0.58491

Norman
Suspicious_Gen2.ZHXB
11.20140722

Panda Antivirus
Generic Malware
14.07.22.01

Qihoo 360 Security
Win32/Application.623
1.0.0.1015

Quick Heal
Trojan.Trafog
7.14.12.00

Rising Antivirus
PE:Trojan.Win32.Generic.12730A1A!309529114
23.00.65.14720

Sophos
Tola's Patching Engine
4.98

Trend Micro House Call
TROJ_GEN.R0CBC0DFO13
7.2.203

Trend Micro
TROJ_GEN.R0CBC0DFO13
10.465.22

VIPRE Antivirus
Backdoor.Graybird
27594

File size:
57.3 KB (58,684 bytes)

Copyright:
Copyright © Tola 2k++

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\singleclick systems\wireless network ignition\patch.exe

File PE Metadata
Compilation timestamp:
8/12/2062 8:20:54 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
768:4lXf+dPW2aihUW+fjDJuGI0jCRedsr4sxOTGCEmTu836ptmmuT7l/o:KX8l2joYTGCEmUy7lQ

Entry address:
0x16C5

Entry point:
6A, 00, E8, E1, 17, 00, 00, A3, 4F, 39, 40, 00, 33, C9, 8B, 91, 00, 10, 40, 00, 85, D2, 0F, 84, 19, 01, 00, 00, 03, C2, A3, E0, 35, 40, 00, E8, 0A, 09, 00, 00, 85, C0, 0F, 84, 05, 01, 00, 00, 68, 00, 04, 00, 00, 6A, 00, E8, 06, 18, 00, 00, 85, C0, 0F, 84, F1, 00, 00, 00, A3, 67, 39, 40, 00, E8, 37, 07, 00, 00, 83, 3D, D8, 35, 40, 00, 03, 0F, 84, D5, 00, 00, 00, C7, 05, BB, 37, 40, 00, 54, 01, 00, 00, 6A, 00, 68, BB, 37, 40, 00, 68, 54, 01, 00, 00, 6A, 29, E8, A4, 16, 00, 00, 68, D3, 38, 40, 00, E8, 1E, 17...
 
[+]

Packer / compiler:
TASM / MASM

Code size:
8 KB (8,192 bytes)

Remove patch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.