home

IPInvestigationWiseSummary.EXE

patientBillwise

BTS

The executable IPInvestigationWiseSummary.EXE has been detected as malware by 3 anti-virus scanners.
Publisher:
BTS

Product:
patientBillwise

Version:
1.00

MD5:
9498331112f842b43ad9bdf7b64db97d

SHA-1:
4be1e6fd2cb5a5fbca742261f15769f184287f7e

SHA-256:
5336647a98d5b0a23a10b59be429113b0769fcaf774820f31f4df45308cda691

Scanner detections:
3 / 68

Status:
Malware

Analysis date:
4/18/2024 7:57:41 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Patched.Ren.Gen
3.6.1.96

avast!
Win32:WrongInf-F [Susp]
2014.9-150401

NANO AntiVirus
Virus.Win32.Virut-Gen.bwpxnc
0.30.8.659

File size:
1.5 MB (1,527,808 bytes)

Product version:
1.00

Original file name:
IPInvestigationWiseSummary.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\bts\hms\ipinvestigationwisesummary.exe

File PE Metadata
Compilation timestamp:
5/25/2055 11:40:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:AbCICYSyaX7A7mFur3JOrZi0uKhEFyNOCk:elCYSyaXMqFurZqZi0uKWFyNdk

Entry address:
0x143C

Entry point:
68, B4, 1A, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 54, 43, D3, 4E, CB, 82, 64, 44, A7, 9E, B0, A3, EE, 0D, 2C, A4, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 20, 20, 20, 20, 3D, 20, 70, 61, 74, 69, 65, 6E, 74, 62, 69, 6C, 6C, 77, 69, 73, 65, 00, 00, 00, 00, 00, FF, CC, 31, 00, 0F, E2, E7, 09, B9, 87, 70, 19, 45, BD, E4, 0E, 41, E1, A1, 11, B6, 1D, F3, B7, 69, 61, 17, D3, 49, 8C, 54, B1, 3F, BB, 71, 30, 07, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
0.2271

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
32 KB (32,768 bytes)

Remove IPInvestigationWiseSummary.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.