home

PatchMyPC.exe

Patch My PC

Patch My PC

It runs as a scheduled task under the Windows Task Scheduler triggered daily at a specified time. The file has been seen being downloaded from skole.hfk.no and multiple other hosts.
Publisher:
www.patchmypc.net  (signed by Patch My PC)

Product:
Patch My PC

Version:
3.0.3.0

MD5:
eaefdf365647e2f6a5596e92dfa8394e

SHA-1:
53cfab34a5c264d5245ab6a3a5b0bfeca2e2d7f0

SHA-256:
07db0d01d58302c9a1d14d30ce69983a4d4e3f84300aa038d5686387fa21a4e5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:14:43 PM UTC  (today)

File size:
600 KB (614,432 bytes)

Product version:
3.0.3.0

Copyright:
Copyright © Justin Chalfant

Original file name:
PatchMyPC.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\patchmypc.exe

Digital Signature
Signed by:
Patch My PC

Authority:
COMODO CA Limited

Valid from:
11/17/2014 12:00:00 AM

Valid to:
11/16/2016 11:59:59 PM

Subject:
CN=Patch My PC, O=Patch My PC, STREET=4300 Lilly Gulch Trail, L=Castle Rock, S=Colorado, PostalCode=80109, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F489E93290811AEE597B10E14C7AC5CA

File PE Metadata
Compilation timestamp:
7/29/2015 9:10:40 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
80.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:vvxfPudsb3mcIBS2r8fRAEGAKGYHWEYUwEUI0+5T0:3qsbMr73YcUI0OT0

Entry address:
0x88036

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1700

Code size:
536.5 KB (549,376 bytes)

Scheduled Task
Task name:
Patch My PC

Trigger:
Daily (Runs daily at 09:54)

Description:
Task to launch Patch My PC to update your system.


The file PatchMyPC.exe has been seen being distributed by the following 6 URLs.

http://skole.hfk.no/.../8babce2c431d48ed9ff0283c08657fa8.aspx?id=19320&epslanguage=nb-NO

https://www.mysupportcrew.com/.../PatchMyPC.exe

http://cd-rom-archive.s3.amazonaws.com/content/.../PatchMyPC.exe

http://patchmypc.net/PatchMyPC.exe

http://software-files-a.cnet.com/s/software/14/41/51/.../PatchMyPC.exe

https://patchmypc.net/.../PatchMyPC.exe

Scan PatchMyPC.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.