home

patch.exe

The executable patch.exe has been detected as malware by 19 anti-virus scanners.
MD5:
3d74315e9ee6e3c4a4d946815aac6f98

SHA-1:
9f7dedd7d5edc8aad830fb6c8036b0b04de19f75

SHA-256:
1a8c804e09463b947dcb7177b4bf24b6eba787856a4d670f1e113a20eea69484

Scanner detections:
19 / 68

Status:
Malware

Analysis date:
4/30/2024 11:25:30 AM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Win-Trojan/Xema.variant
5.0.

Avira AntiVirus
TR/Spy.8009
7.9.0.222

Emsisoft A-Squared
Virus.Win32.Small!IK
4.5.0.24

avast!
Win32:Spyware-gen
2014.9-170315

AVG
Suspicion: unknown virus
2018.0.2439

Bitdefender
Trojan.Generic.1647224
1.0.20.370

Clam AntiVirus
Trojan.Win32.Crack
0.98/171

Comodo Security
ApplicUnsaf.Win32.HackTool.Agent.~BACU
1733

ESET NOD32
Win32/HackTool.Patcher (variant)
11.4267

F-Prot
W32/Heuristic-210
v6.4.4.4.56

F-Secure
Suspicious:W32/Malware!Gemini
11.2017-15-03_4

G Data
Trojan.Generic.1647224
17.3.19

IKARUS anti.virus
Virus.Win32.Small
t3scan.1.1.64.0

McAfee
Generic.dx
5600.6095

Norman
Suspicious_F.gen
11.20170315

Panda Antivirus
Suspicious file
17.03.15.02

Quick Heal
Trojan.Agent.irc
3.17.10.00

Sophos
Mal/Packer
4.43

Trend Micro
PAK_Generic.001
10.465.15

File size:
7.8 KB (8,009 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\spcs\spcs förening demo\patch.exe

File PE Metadata
Compilation timestamp:
9/11/1987 3:35:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Entry address:
0x154

Entry point:
4D, 5A, 66, 73, 67, 00, 00, 00, 00, 00, 00, 00, 50, 45, 00, 00, 4C, 01, 02, 00, 46, 53, 47, 21, 00, 00, 00, 00, 00, 00, 00, 00, E0, 00, 0F, 01, 0B, 01, 00, 00, 00, 1C, 00, 00, 00, 20, 00, 00, 00, 00, 00, 00, 54, 01, 00, 00, 00, 10, 00, 00, 0C, 00, 00, 00, 00, 00, 40, 00, 00, 10, 00, 00, 00, 02, 00, 00, 04, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 00, 00, 00, 00, 00, 90, 00, 00, 00, 02, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 00, 00, 10, 00, 00, 10, 00, 00, 00, 00, 10, 00, 00, 10, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
7 KB (7,168 bytes)

Remove patch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.