Gridinsoft Logo
File Icon

The WeModPatcher v1.2.3 Installer.exe (WeModPatcher Installer) File Analysis

Updated 10 months ago
Checked by Malaware Check
WeModPatcher v1.2.3 Installer.exe

Technical Analysis

File Name WeModPatcher v1.2.3 Installer.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
49152:TsvQTz2HBRiTniMKIXMo3v4NwAYxzWRZTkPcPQ:TsqaBYnFK9of4KLAkk4
Scanner Version 1.0.182.174
Database Version 2024-07-16 13:00:18 UTC
āš 

Suspicious File Detected

Detected by 31 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

Patcher software modifies existing programs to bypass licensing restrictions or enable unauthorized use. These tools are associated with software piracy and may introduce security vulnerabilities or additional malware to systems.
42%
Detection Rate
2,327,206
File Size (bytes)
31/73
Engines Detected
2024-07-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
3f6e89c9fa6a33260431be56e54b029c
SHA1
c8000d22cf9b9df4525fdb6f954eab1ff56a9a12
SHA256
db32980ec610e49928beba4a87f5eb15a6a70aaf02acb8b966e55b4876646d8b
SHA512
fe77a8e027511712031cb77a291bd4c4d18626a2dcac86bc0b8234357bf29ef1a2a60e4448e138888582e3fefdf2fa27e05c637c9d8290ec15f2e36e8569f241
ImpHash
75e9596d74d063246ba6f3ac7c5369a0

Security Engines with Detections (31 of 73)

Bkav
W32.AIDetectMalware Malicious
Lionic
Trojan.Win32.Generic.4!c Malicious
MicroWorld-eScan
Trojan.GenericKD.73298181 Malicious
CAT-QuickHeal
Hacktool.Patcher Malicious
Skyhigh
BehavesLike.Win32.Generic.vc Malicious
ALYac
Trojan.GenericKD.73298181 Malicious
Cylance
Unsafe Malicious
Sangfor
Hacktool.Win32.Agent.Vkx6 Malicious
Cybereason
malicious.9fa6a3 Malicious
Arcabit
Trojan.Generic.D45E7105 Malicious
Symantec
Trojan.Gen.9 Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09FT24 Malicious
BitDefender
Trojan.GenericKD.73298181 Malicious
Avast
Win32:Malware-gen Malicious
Emsisoft
Trojan.GenericKD.73298181 (B) Malicious
VIPRE
Trojan.GenericKD.73298181 Malicious
McAfeeD
ti!DB32980EC610 Malicious
FireEye
Generic.mg.3f6e89c9fa6a3326 Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
Webroot
W32.Malware.Gen Malicious
Varist
W32/ABTrojan.RQZJ-0855 Malicious
MAX
malware (ai score=85) Malicious
Microsoft
HackTool:Win32/Patcher!MTB Malicious
GData
Trojan.GenericKD.73298181 Malicious
Cynet
Malicious (score: 100) Malicious
Google
Detected Malicious
Malwarebytes
Malware.AI.2468493499 Malicious
MaxSecure
Trojan.Malware.3411146.susgen Malicious
AVG
Win32:Malware-gen Malicious
DeepInstinct
MALICIOUS Malicious
CrowdStrike
win/malicious_confidence_60% (D) Malicious
42 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

ā–¼
Icon
Hash: ad3599679a2b0e11876ac984ea70e578
Fuzzy: 3e23dad75bff0f2da92057f7a947bd31
dHash: 8437aaaac0cccdb2
Image Base 0x00400000
Entry Point 0x00421d50
Compilation Time 2023-10-03 07:51:19
Checksum 0x00000000 (Actual: 0x00243d76)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
Digital Signature The PE file does not contain a certificate table.
Imports 3 libraries
KERNEL32, OLEAUT32, gdiplus
Exports 0 functions
Resources 39 Resources
Sections 6 Sections

Version Information

ā–¼
FileDescription WeModPatcher Installer
LegalCopyright brunoleeĀ©
LegalTrademarks brunoleeā„¢
OriginalFilename WeModPatcher Installer
ProductName WeModPatcher Installer
ProductVersion 1.2.3
Translation 0x0409 0x04b0

PE Sections

ā–¼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 214,476 bytes 214,528 bytes 6.71 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B7A8B04AB2248443B05E8133FB3A9064
.rdata 0x00036000 46,096 bytes 46,592 bytes 5.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A418919D63B67E937555EEC95D3B6BCB
.data 0x00042000 149,336 bytes 4,608 bytes 4.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D8D5C95192B51DDAD1857CAA38E7DAA9
.didat 0x00067000 420 bytes 512 bytes 3.52 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EE74A17C4EEB586C9811481B77498B43
.rsrc 0x00068000 414,416 bytes 414,720 bytes 6.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1ADB212E646AC9D7887C185F641FD760
.reloc 0x000ce000 9,564 bytes 9,728 bytes 6.67 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 699C6B2B1B2ACAD2D0F219D9328713AF
Entropy Analysis Alert

2 section(s) with elevated entropy (ā‰„6.5) - possible compression

Resource Analysis

ā–¼
Total Resources: 39 (412,121 bytes)
Resource Type Count Total Size Percentage
PNG 2 23,719 bytes
5.8%
RT_ICON 18 378,509 bytes
91.8%
RT_DIALOG 6 2,916 bytes
0.7%
RT_STRING 10 4,204 bytes
1%
RT_GROUP_ICON 1 258 bytes
0.1%
RT_VERSION 1 640 bytes
0.2%
RT_MANIFEST 1 1,875 bytes
0.5%

Certificate Chain Analysis

ā–¼
Certificate Information
Product WeModPatcher Installer
Description WeModPatcher Installer
Original Name WeModPatcher Installer
Copyright brunoleeĀ©

āœ“ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
31 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware