home

patchdb.exe

MD5:
23a3c77795dc29d981283fced9a0c0f0

SHA-1:
41a3d6c5a27c1d11956e28f3d4c68b2ce743973b

SHA-256:
cab4b68321aed305c13c25b80a8169811e7c5011efa4cbd04c3ca65c97ffc261

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:14:49 AM UTC  (today)

File size:
3.1 MB (3,269,983 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\patchdb.exe

File PE Metadata
Compilation timestamp:
4/4/2001 4:53:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
24576:HUpPlq5REaP0K60C77Pe93KEFqAAcHllN/Mte94+za6BBsMGgwyWTqZ34Zt2ykje:HMl6W0C7LoJxcte94+1IFGoZ9CUd4N0

Entry address:
0x1210

Entry point:
55, 8B, EC, 6A, FF, 68, 80, 20, 40, 00, 68, 10, 14, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, 98, 53, 56, 57, 89, 65, E8, C7, 45, FC, 00, 00, 00, 00, 6A, 02, FF, 15, 64, 20, 40, 00, 83, C4, 04, C7, 05, B4, 30, 40, 00, FF, FF, FF, FF, C7, 05, B8, 30, 40, 00, FF, FF, FF, FF, FF, 15, 60, 20, 40, 00, 8B, 0D, AC, 30, 40, 00, 89, 08, FF, 15, 5C, 20, 40, 00, 8B, 15, A8, 30, 40, 00, 89, 10, A1, 34, 20, 40, 00, 8B, 08, 89, 0D, BC, 30, 40, 00, E8, 76, 01, 00, 00, A1, 1C, 30, 40, 00, 85...
 
[+]

Entropy:
6.8423

Developed / compiled with:
Microsoft Visual C++

Code size:
1.5 KB (1,536 bytes)

The file patchdb.exe has been seen being distributed by the following URL.

https://files.slack.com/files-pri/T0JRA3HP1-F0SJYSJ8Y/.../patchdb.exe

Scan patchdb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.