home

patch.exe

The executable patch.exe has been detected as malware by 25 anti-virus scanners.
MD5:
509c44c3ab8ff8a5d2762b9cbb57036e

SHA-1:
adade33e102119d7d15a6348aaf35f9ca6ed0d1b

SHA-256:
fc0b254dd1d9c23e0c6c5436b334baee5a80baf612b27b610dc37e83418b90da

Scanner detections:
25 / 68

Status:
Malware

Analysis date:
4/28/2024 9:13:12 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Win-Trojan/Agent.776644
2010.12.11

Avira AntiVirus
TR/Packed.4825
7.10.14.255

avast!
Win32:Trojan-gen
2014.9-170311

AVG
Generic10
2018.0.2442

Bitdefender
Backdoor.Generic.178411
1.0.20.350

Clam AntiVirus
Trojan.PSW.Game.FLG
0.98/17411

Comodo Security
TrojWare.Win32.Trojan.NSPM.~gen
7018

Dr.Web
Trojan.Click.49333
9.0.1.070

ESET NOD32
Win32/HackTool.Patcher
11.5693

F-Prot
W32/Heuristic-210
v6.4.6.2.117

F-Secure
Backdoor.Generic.178411
11.2017-11-03_7

G Data
Backdoor.Generic.178411
17.3.21

IKARUS anti.virus
Backdoor.Pigeon
t3scan.1.1.90.0

K7 AntiVirus
Riskware
13.71.3211

Kaspersky
Trojan.Win32.Genome
14.0.0.-1294

McAfee
Generic.dx
5600.6098

Norman
W32/Packed_Nspack.A
11.20170311

nProtect
Trojan-Dropper/W32.MulDrop.776644
10.12.10.01

Panda Antivirus
Trj/Lineage.BZE
17.03.11.09

Prevx
High Risk Worm
3.0

Sophos
Mal/Packer
4.60

Trend Micro House Call
TROJ_ZEROML.AY
7.2.70

Trend Micro
TROJ_ZEROML.AY
10.465.11

Vba32 AntiVirus
Win32.Agent.OBH
3.12.14.2

VIPRE Antivirus
Packer.NSAnti.Gen
7600

File size:
758.4 KB (776,644 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
8/20/2007 7:46:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

Entry address:
0xEC384

Entry point:
9C, 60, E8, 00, 00, 00, 00, 5D, 83, ED, 07, 8D, 8D, BC, FD, FF, FF, 80, 39, 01, 0F, 84, 42, 02, 00, 00, C6, 01, 01, 8B, C5, 2B, 85, 50, FD, FF, FF, 89, 85, 50, FD, FF, FF, 01, 85, 80, FD, FF, FF, 8D, B5, C4, FD, FF, FF, 01, 06, 55, 56, 6A, 40, 68, 00, 10, 00, 00, 68, 00, 10, 00, 00, 6A, 00, FF, 95, F8, FD, FF, FF, 85, C0, 0F, 84, 69, 03, 00, 00, 89, 85, 78, FD, FF, FF, E8, 00, 00, 00, 00, 5B, B9, 67, 03, 00, 00, 03, D9, 50, 53, E8, B0, 02, 00, 00, 5E, 5D, 8B, 36, 8B, FD, 03, BD, 40, FD, FF, FF, 8B, DF, 83...
 
[+]

Entropy:
7.9850

Packer / compiler:
NsPacK V3.7

Remove patch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.