home

servu_5201_crack.exe

The application servu_5201_crack.exe, “Patch created by Tola's Patching Engine” has been detected as a potentially unwanted program by 27 anti-malware scanners.
Description:
Patch created by Tola's Patching Engine

Version:
2.03

MD5:
4578be6231dfef5efde48aabb875930e

SHA-1:
38954b05d19f4bdd391253b424381b6800b151c5

SHA-256:
a21f4286c1b59c9b25589f8d20086cbb6cb29820759cd403e98ed9165cd00639

Scanner detections:
27 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 4:58:34 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Aseye.AZH
1018

Agnitum Outpost
Trojan.Tool
7.1.1

AhnLab V3 Security
Unwanted/Win32.Patch
2014.02.22

Avira AntiVirus
APPL/Tool.TPE.BQ
7.11.133.40

Baidu Antivirus
Trojan.Win32.TPE
4.0.3.14423

Bitdefender
Application.Aseye.AZH
1.0.20.565

Clam AntiVirus
Win.Trojan.Tool-81
0.98/18355

Comodo Security
Backdoor.Win32.Agent.ZAC
17826

Dr.Web
Tool.ASEye.2
9.0.1.0113

ESET NOD32
Win32/Tool.TPE (variant)
8.9456

Fortinet FortiGate
Riskware/TolasPE
4/23/2014

F-Prot
W32/Tola.A.gen
v6.4.7.1.166

F-Secure
Application.Aseye.AZH
11.2014-23-04_4

G Data
Application.Aseye.AZH
14.4.24

IKARUS anti.virus
Trojan.Feutel
t3scan.2.2.29

Malwarebytes
RiskWare.Tool.CK
v2014.04.23.03

McAfee
Tool-TPatch
5600.7152

MicroWorld eScan
Application.Aseye.AZH
15.0.0.339

NANO AntiVirus
Riskware.Win32.ASEye.cjxuqg
0.28.0.57630

Norman
GrayBird.NKK
11.20140423

nProtect
Trojan/W32.Agent.40667
14.02.21.02

Panda Antivirus
Trj/CI.A
14.04.23.03

Sophos
Tola's Patching Engine
4.97

SUPERAntiSpyware
Trojan.Agent/Gen-Tool
10649

Trend Micro House Call
TSPY_InService
7.2.113

Trend Micro
TSPY_InService
10.465.23

VIPRE Antivirus
Trojan.Win32.Generic
26724

File size:
39.7 KB (40,667 bytes)

Copyright:
Copyright © Tola 2k++

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
8/12/2062 3:20:54 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
768:TlXf+dPW2aihUW+ft4pAGhqBEopP0cu0EBmM:ZX8lxmGhq6opP0L0EBmM

Entry address:
0x16C5

Entry point:
6A, 00, E8, E1, 17, 00, 00, A3, 4F, 39, 40, 00, 33, C9, 8B, 91, 00, 10, 40, 00, 85, D2, 0F, 84, 19, 01, 00, 00, 03, C2, A3, E0, 35, 40, 00, E8, 0A, 09, 00, 00, 85, C0, 0F, 84, 05, 01, 00, 00, 68, 00, 04, 00, 00, 6A, 00, E8, 06, 18, 00, 00, 85, C0, 0F, 84, F1, 00, 00, 00, A3, 67, 39, 40, 00, E8, 37, 07, 00, 00, 83, 3D, D8, 35, 40, 00, 03, 0F, 84, D5, 00, 00, 00, C7, 05, BB, 37, 40, 00, 54, 01, 00, 00, 6A, 00, 68, BB, 37, 40, 00, 68, 54, 01, 00, 00, 6A, 29, E8, A4, 16, 00, 00, 68, D3, 38, 40, 00, E8, 1E, 17...
 
[+]

Entropy:
5.7557

Packer / compiler:
TASM / MASM

Code size:
8 KB (8,192 bytes)

Remove servu_5201_crack.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.