IPBedStatusReport.EXE

prjpayble report

BTS

The executable IPBedStatusReport.EXE has been detected as malware by 3 anti-virus scanners.
Publisher:
BTS

Product:
prjpayble report

Version:
1.00

MD5:
d1a5b63c537455757c7a92ad3d791579

SHA-1:
b313f8c5b9373d92c0df518ef52387f42724e2d0

SHA-256:
63059b725ce4fd0337886edeb9510f8087748bf1fb22740947d0a941f14407ce

Scanner detections:
3 / 68

Status:
Malware

Analysis date:
4/19/2024 8:12:58 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Patched.Ren.Gen
3.6.1.96

avast!
Win32:Evo-gen [Susp]
150319-0

NANO AntiVirus
Virus.Win32.Virut-Gen.bwpxnc
0.30.8.659

File size:
1.5 MB (1,609,728 bytes)

Product version:
1.00

Original file name:
IPBedStatusReport.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\bts\hms\ipbedstatusreport.exe

File PE Metadata
Compilation timestamp:
11/4/2010 2:38:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:6eYLP8AeMUbnCHX6jwO61jI/bH2P2moL1E:NxdMUbCg6fX

Entry address:
0x15BC

Entry point:
68, 18, 8A, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, E4, 35, 0A, C1, 51, 65, 80, 4D, AE, EA, B0, 2E, 45, B1, 4F, B3, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 50, 72, 6F, 6A, 65, 63, 74, 31, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 0D, D9, 1F, 08, 4C, 5B, DF, 17, 46, 9B, 3F, F3, 77, F0, 0A, F6, 8C, 45, 1B, 0E, 44, E7, 63, 43, 45, B5, 2F, 32, D9, 1C, FE, 8D, B4, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
0.5127

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
76 KB (77,824 bytes)

Remove IPBedStatusReport.EXE - Powered by Reason Core Security