home

IPBILLING.EXE

prjIPBilling

BTS

Publisher:
BTS

Product:
prjIPBilling

Version:
65.01.0001

MD5:
7aac0ea2d1fed3237124bdc68ab5d51e

SHA-1:
e79465b5562168983176b322a27c85964c66f6b1

SHA-256:
7e4ea54c69b9c75123e9e0e2f5a262b833ba69fc79634f234d8f08ee6a7f4f65

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 6:49:09 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Patched.Ren.Gen
3.6.1.96

NANO AntiVirus
Virus.Win32.Virut-Gen.bwpxnc
0.30.8.659

File size:
4.1 MB (4,292,608 bytes)

Product version:
65.01.0001

Original file name:
IPBILLING.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\bts\hms\ipbilling.exe

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:9SDcazzeglZGVMeptAMV6pmkHMZmCpUz7cIOppJBVf2Fzr:UDcazzeglZGVMeptAMV6pmkHMZmCKz7h

Entry address:
0x6AF8

Entry point:
68, 10, 6C, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 9B, E9, 4D, DB, 4B, 35, 0B, 4A, A1, C0, 0A, DF, 04, FD, 9E, 4D, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, EF, FE, 00, 00, 01, 00, 70, 72, 6A, 49, 50, 42, 69, 6C, 6C, 69, 6E, 67, 00, 00, 00, 00, 00, 00, 00, 00, 06, 00, 00, 00, A4, 32, 43, 00, 07, 00, 00, 00, 18, 15, 43, 00, 07, 00, 00, 00, D0, 14, 43, 00, 01, 00, 05, 00, 6C, FB, 42, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00...
 
[+]

Entropy:
4.4692

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
2.8 MB (2,883,584 bytes)

Scan IPBILLING.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.