» business-in-a-box_setup-vp.exe
Overview
Analysis
File Details
Programs (1)

business-in-a-box_setup-vp.exe

Business-in-a-Box

Biztree Inc.

This is a setup and installation application. This file is installed with the program Business-in-a-Box.

File name:

Publisher:

Biztree Inc. (signed and verified)

Product:

Business-in-a-Box

Description:

Business-in-a-Box Installation Wizard

Version:

5.1.6

MD5:

78efb41a294e7e7a721a55b46c1e8159

SHA-1:

275b6fe43e28798ab9ee7e6e67b1a1d2792f94fd

SHA-256:

c6571c3d81a826bce776c53e2de2ecd4c37d9da7f69a57481cf2275038e7d300

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/25/2024 9:43:58 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.EXECryptor

0.98/18011

Quick Heal

(Suspicious) - DNAScan

6.15.11.00

File size:

663.5 KB (679,392 bytes)

Product version:

5.1.6

Original file name:

Business-in-a-Box_Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\business-in-a-box_setup-vp.exe

Digital Signature

Signed by:

Biztree Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

4/28/2010 8:00:00 PM

Valid to:

5/5/2012 7:59:59 PM

Subject:

CN=Biztree Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Biztree Inc., L=MONTREAL, S=QUEBEC, C=CA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

5D6D9F6CD8D9CA91CE940AB4D69A7211

File PE Metadata

Compilation timestamp:

5/24/2011 2:03:09 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:FA2ugxatU03t7TSREBoYqzkl/f7ygAmFBSLmvzzPe1HfCMNjA6hj+o:hugxaGotfSyZqwf7yg5XPg3E6BR

Entry address:

0x227F2C

Entry point:

E8, 3B, FF, FF, FF, 05, 11, A1, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, F3, 4B, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, 03, E9, 45, 27, BA, D3, 00, B6, 86, 95, 93, DF, D1, 92, D4, 2D, BE, F6, BB, 20, C9, 5E, 59, 12, F7, 17, 23, 98, 58, 5E, A6, D7, 35, 09, F9, BF, 22, 2A, 21, D6, 32, DC, 04, C4, 24, 87, 81, 42, 63, DA, E8, D6, AC, C1, 0B, EE, 4A, A8, 17, 7F, 7E, 7E, BA, C0, 3A, 1F, 50, 22, 04, 82, 9F, E2, 1C, 6B, F3, AA, A1, B1, 0A, F8, 3B, DA, D1, 14, 54, 7E, AF, 56, C2, FA, A6, 38... 
[+]

Entropy:

7.7278 (probably packed)

Code size:

312.5 KB (320,000 bytes)

The file business-in-a-box_setup-vp.exe has been discovered within the following program.

Business-in-a-Box by Biztree Inc.

Publisher's description - “Business-in-a-Box helps you complete a wide range of activities, from contract writing to daily communications, client acquisition, business management, HR management, accounting and more.”

www.biztree.com

About 9% of users remove it

Scan business-in-a-box_setup-vp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.