» GENERALADMINISTRATION.exe
Overview
Analysis
File Details

GENERALADMINISTRATION.exe

General Admin

BTS

File name:

Publisher:

BTS

Product:

General Admin

Version:

42.02.0001

MD5:

88a0ff4339d45c44f551944cc0c5c264

SHA-1:

bace8c4a9358c3be3af60d3074ce743249ff8e2c

SHA-256:

48fb5953948b3d9c11575f2c6d99279d02d719b7bea40395c44c08f82ab78a36

Scanner detections:

3 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

4/26/2024 4:53:05 PM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Crypt.XPACK.Gen

3.6.1.96

Kaspersky

HEUR:Trojan.Win32.Generic

14.0.0.2260

NANO AntiVirus

Virus.Win32.Virut-Gen.bwpxnc

0.30.8.659

File size:

3.2 MB (3,338,240 bytes)

Product version:

42.02.0001

Original file name:

GENERALADMINISTRATION.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\bts\hms\generaladministration.exe

File PE Metadata

Compilation timestamp:

5/25/2055 11:40:40 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

98304:54UW87LaSqm+DTfZX816qjgBAgK9zkikfVD:54UW87LaSqm+DTfZX816qjgBAgK9zkiW

Entry address:

0x2B3CB6

Entry point:

0A, 3F, E1, 86, 82, 67, 6A, 6A, 6A, 82, F4, 6A, 6A, 6A, 81, 6A, 96, 83, 83, C8, 72, 9C, 0D, 0E, 95, 5C, 6A, 6A, 5B, 47, 61, 57, 01, 6A, 0D, 0E, E3, 4C, 6A, 6A, 5B, A3, 02, 6A, 6A, 6A, EA, 02, 6A, 6A, 6A, EA, 02, 6A, EA, 6A, 6A, 3B, 02, 6A, 6A, 6A, EA, 02, 7A, 6A, 6A, 6A, 02, 6A, 6A, 6B, 6A, 02, 6A, 6A, 6A, EA, 3B, 02, 6A, 6A, 6A, EA, D7, 6A, 6A, 6A, 6A, E1, 3F, 92, 0D, 0E, E3, 7C, 6A, 6A, 43, B8, 43, A3, 9F, ED, B1, ED, B1, DB, 8B, E7, 38, 6B, 23, 1F, 90, 82, 5A, 6A, 6A, 6A, EB, 83, 44, D7, 9C, 95, 3B, 43... 
[+]

Entropy:

5.3409

Code size:

2.7 MB (2,830,336 bytes)

Scan GENERALADMINISTRATION.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.