home

OutSidePatientInvestations.exe

OPBillingRepots

BTS

The executable OutSidePatientInvestations.exe has been detected as malware by 4 anti-virus scanners.
Publisher:
BTS

Product:
OPBillingRepots

Version:
1.00

MD5:
d7e3576c0cf945a69b8f422a940e7c64

SHA-1:
0cfd026345daf6860d1284f447559f5fb5110948

SHA-256:
1fd68ecdf3deee8a50b6411a7244319e3c0460b3e497a28824a38273970a75dd

Scanner detections:
4 / 68

Status:
Malware

Analysis date:
4/26/2024 8:11:40 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Patched.Ren.Gen
3.6.1.96

avast!
Win32:Evo-gen [Susp]
150319-0

IKARUS anti.virus
Trojan.Win32.DNSChanger
t3scan.1.8.9.0

NANO AntiVirus
Virus.Win32.Virut-Gen.bwpxnc
0.30.8.659

File size:
508 KB (520,192 bytes)

Product version:
1.00

Original file name:
OutSidePatientInvestations.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\bts\hms\outsidepatientinvestations.exe

File PE Metadata
Compilation timestamp:
5/25/2055 11:40:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:TBL8WnnyvkCxT4Sd2HnuXdmyCVIZBF8E4BJNzjC:TV8WnnyvrxTwH6d1CVIGDzW

Entry address:
0x14CC

Entry point:
68, F4, 1A, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, 00, A6, 65, 2C, B2, 72, A2, 45, B6, BF, 5D, 4F, D5, EA, 62, 1B, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 08, F0, 4E, 01, 4F, 50, 42, 69, 6C, 6C, 69, 6E, 67, 52, 65, 70, 6F, 72, 74, 73, 00, C0, 40, 00, 3C, F0, 4E, 01, 00, 00, 00, 00, FF, CC, 31, 00, 0F, 7E, 63, 59, 6C, D7, 8A, 22, 41, 84, E4, FB, D2, FF, 20, 4C, 6F, 12, E9, 40, F7, EF, 5A, 75, 49, 84, 71, 03, 6F, 25, EE, D3, C0, 3A, 4F, AD...
 
[+]

Entropy:
0.6271

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
32 KB (32,768 bytes)

Remove OutSidePatientInvestations.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.