IPDuesStatusReport.exe

prjpayble report

BTS

The executable IPDuesStatusReport.exe has been detected as malware by 4 anti-virus scanners.
Publisher:
BTS

Product:
prjpayble report

Version:
1.00

MD5:
32af6cf499c97f0963e6ffbb2b13fe79

SHA-1:
303b6819df3105cbed474b07c848e555cb2ff09a

SHA-256:
3cd00e3ee666d935f5d48c32c6352c5854e8dc3e112567828cc8f10fad06793d

Scanner detections:
4 / 68

Status:
Malware

Analysis date:
4/19/2024 8:18:11 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Patched.Ren.Gen
3.6.1.96

avast!
Win32:WrongInf-A [Susp]
2014.9-150401

NANO AntiVirus
Virus.Win32.Virut-Gen.bwpxnc
0.30.8.659

Quick Heal
(Suspicious) - DNAScan
4.15.14.00

File size:
452 KB (462,848 bytes)

Product version:
1.00

Original file name:
IPDuesStatusReport.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\bts\hms\ipduesstatusreport.exe

File PE Metadata
Compilation timestamp:
5/25/2055 11:40:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:yeY0B78REvNA7pwnf1BYBQVjsTaezRTbDBggcWPSA:VH78mOw9yzVIA

Entry address:
0x1798

Entry point:
68, 1C, 8C, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 0F, E3, 1E, 8B, 84, A2, 38, 4F, 9D, 22, 6F, 95, 4F, 5D, F4, F2, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 73, 6B, 74, 6F, 70, 5C, 50, 72, 6F, 6A, 65, 63, 74, 31, 00, 72, 63, 65, 20, 43, 6F, 64, 00, 00, 00, 00, FF, CC, 31, 00, 10, CF, 6D, B4, 63, 1F, 53, 79, 4A, B0, 7F, 99, B1, 1B, 3F, 53, 3D, EF, BC, 85, 45, 0F, 7D, 60, 44, B3, 29, 53, AC, 38, 4F, 0A, B6, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
1.9266

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
100 KB (102,400 bytes)

Remove IPDuesStatusReport.exe - Powered by Reason Core Security