» Hospital.exe
Overview
Analysis
File Details

Hospital.exe

Blaise

Centraal Bureau voor de Statistiek (Statistics Netherlands)

File name:

Hospital.exe

Publisher:

Statistics Netherlands (signed by Centraal Bureau voor de Statistiek (Statistics Netherlands))

Product:

Blaise

Description:

Blaise 4.8 Hospital

Version:

4.8.2.1618

MD5:

39c245b2375855e5e18bc5f494ddbdfc

SHA-1:

c2b0894efce10f44a1bccb868801c3b0cd7b628b

SHA-256:

84557e4f7a50f49c6465d4a26082eb2eeda515840cdb1bad4736493eadf2c7a4

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/18/2024 8:17:13 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.PECompact-1

0.98/18155

File size:

1.8 MB (1,894,072 bytes)

Product version:

4.8

Original file name:

Hospital.exe

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\Program Files\statneth\cbs-iris\meta\hospital.exe

Digital Signature

Signed by:

Centraal Bureau voor de Statistiek (Statistics Netherlands)

Authority:

GlobalSign nv-sa

Valid from:

9/16/2010 10:14:01 AM

Valid to:

9/16/2012 10:13:55 AM

Subject:

E=blaise@cbs.nl, CN=Centraal Bureau voor de Statistiek (Statistics Netherlands), OU=Blaise, O=Centraal Bureau voor de Statistiek (Statistics Netherlands), L=Heerlen, S=Limburg, C=NL

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012B19B1DC86

File PE Metadata

Compilation timestamp:

4/20/2011 6:10:55 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:tpkzg262zaBQPYQ4HpRzej1FxA5r1cW2M:tpoiUPPYHdW1FSD2

Entry address:

0x1000

Entry point:

B8, 80, F7, AC, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 8E, 13, FC, C6, 1E, 62, 9A, A2, 13, 5F, AC, 93, F6, DA, 0E, 4A, 3E, 62, 1D, 64, 84, 49, A8, 0C, 99, B2, F5, 69, 35, D4, 52, AF, E7, 82, B9, EB, DF, 2D, 1B, DD, 5F, 55, ED, BE, 51, CB, BA, 79, 06, CE, B9, 06, C3, 57, 03, D8, 92, 66, 83, 3E, 63, CF, BF, AD, A3, E9, EF, F3, 52, AE, 0A, A5, DF, 59, 93, 9E, CE, E4, D8, D0, 15, 4F, 3E, 32, F6, F9, 2A, 83, D0, 95, A4, 50, B5... 
[+]

Packer / compiler:

PECompact v2

Code size:

5.5 MB (5,741,056 bytes)

Scan Hospital.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.