LabsIPDeptWise.EXE

patientBillwise

BTS

The executable LabsIPDeptWise.EXE has been detected as malware by 3 anti-virus scanners.
Publisher:
BTS

Product:
patientBillwise

Version:
1.00

MD5:
36bfd439645aa3ec74efef6bc82bc8a3

SHA-1:
020d0265c7128b22ea54eb10d3ac21d101a985d5

SHA-256:
2929fead62e1c9197c32a5fa7c26f26cb9ff922dce65adb6fb90258a03506345

Scanner detections:
3 / 68

Status:
Malware

Analysis date:
4/18/2024 12:33:06 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.Gen
7.11.30.172

avast!
Win32:WrongInf-A [Susp]
2014.9-150401

NANO AntiVirus
Virus.Win32.Virut-Gen.bwpxnc
0.30.8.659

File size:
388 KB (397,312 bytes)

Product version:
1.00

Original file name:
LabsIPDeptWise.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\bts\hms\labsipdeptwise.exe

File PE Metadata
Compilation timestamp:
5/25/2055 11:40:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:Z8xIxhc8ZVRqsH+1MionQ3Lr2PyVyl1P:ZYMc8ZVRq2+1M/Q3Lr2PyVylR

Entry address:
0x1434

Entry point:
68, 48, 1A, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 82, FF, 6D, BA, DA, 8C, 84, 44, B0, BB, 61, B6, FF, 50, 9B, D8, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 43, 72, 4C, 66, 20, 26, 70, 61, 74, 69, 65, 6E, 74, 62, 69, 6C, 6C, 77, 69, 73, 65, 00, 00, 00, 00, 00, FF, CC, 31, 00, 0D, CC, FD, A4, 3C, 68, 53, 21, 47, 87, EB, EA, C9, 8E, 3F, F7, 55, EF, 99, 05, 26, 95, A4, F9, 45, 98, C4, 7E, C1, C5, 4F, 87, 90, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
0.7068

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
28 KB (28,672 bytes)

Remove LabsIPDeptWise.EXE - Powered by Reason Core Security