The AutoPatch.msi File Analysis

Updated 2 months ago

Checked by Malaware Check

AutoPatch.msi

Technical Analysis

File Name	AutoPatch.msi
File Type	Windows Installer
Magic Bytes	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft Visual C++ 2022 Redistributable(x64) - 14.40.33810, Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft Visual C++ 2022 Redistributable(x64) - 14.40.33810., Template: Intel;1033, Revision Number: {5D09B3BA-C199-4368-80AB-7FB39A463415}, Create Time/Date: Fri Sep 13 17:38:04 2024, Last Saved Time/Date: Fri Sep 13 17:38:04 2024, Number of Pages: 400, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.0.8606), Security: 2
SSDEEP Hash	393216:mIcjwm5q+kQVPALUbsZTwQ3RwlptVYmRr7yBG/4uOzH61/Nc1eJ/RXqMPDyiz:OfkUPALUbAGptt17yBG/jH1/N/tqUDZ
Scanner Version	1.0.211.174
Database Version	2025-03-22 23:00:43 UTC

⚠

Suspicious File Detected

Detected by 14 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

25%

Detection Rate

23,142,400

File Size (bytes)

14/56

Engines Detected

2025-03-22

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	15e4acac5a2398fb59755b56946287d9
SHA1	0b778a271b18d3319dc3181f1afd256ce5210661
SHA256	6d8dd8b790319d60ff97749b97cb47cd601781e2d6bf5b61980d42373bb3b8ca
SHA512	9b062226c33ed86db8efb499712e7b875ecb8c99abfd799d46d793c2eb05e2bb2d429b016338c52b185932b94fc140fa7495c4d23313136f04a0bfc90db28a77

Security Engines with Detections (14 of 56)

Skyhigh

BAT/Agent.ha Malicious

McAfee

BAT/Agent.ha Malicious

Symantec

Trojan.Gen.MBT Malicious

ESET-NOD32

Win32/GenCBL.FHP Malicious

Avast

Other:Malware-gen [Trj] Malicious

Cynet

Malicious (score: 99) Malicious

Kaspersky

Trojan.BAT.Agent.cjg Malicious

Tencent

Vbs.Trojan.Agent.Ekjl Malicious

F-Secure

Trojan.TR/BAT.Agent.gcmuz Malicious

DrWeb

BAT.Starter.560 Malicious

Avira

TR/BAT.Agent.gcmuz Malicious

Fortinet

W32/GenCBL.FHP!tr Malicious

AVG

Other:Malware-gen [Trj] Malicious

alibabacloud

Trojan:Win/GenCBL.FJD Malicious

42 engines reported no threats - Only engines with detections are shown above for clarity

Certificate Chain Analysis

Certificate Information

Signing Date	05:39 PM 09/13/2024 (266 days ago)
Verification Status	A certificate was explicitly revoked by its issuer.
Signers	GreenLine Software Corp.; SSL.com Code Signing Intermediate CA RSA R1; SSL.com Root Certification Authority RSA
Counter Signers	SSL.com Timestamping Unit 2024 E1; SSL.com Timestamping Issuing RSA CA R1; SSL.com Root Certification Authority RSA

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

A certificate was explicitly revoked by its issuer.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

14 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1