» airbackupsc.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

airbackupsc.exe

airbackup Service Controller

TeamViewer GmbH

It runs as a separate (within the context of its own process) windows Service named “airbackup Service Controller”. This is installed with airbackup.

File name:

airbackupsc.exe

Publisher:

TeamViewer (signed by TeamViewer GmbH)

Product:

airbackup Service Controller

Version:

14.0.0.15146.rf94a89021a4b0d6e84bb5ccd993e6ae56048c8cb

MD5:

77bb4f0cf98da9710c434d7d03931fdb

SHA-1:

c24c0c8f652c2d32a7f8a0be9c773f404dd5a721

SHA-256:

9f754ccc1ab980c160ae47d4934b2ca9d7dd8611a6504598c9a959a22481f14d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 4:29:10 AM UTC (today)

File size:

1.2 MB (1,215,976 bytes)

Product version:

14.0.0.15146

2013-2014 TeamViewer GmbH.

Original file name:

BackupSC.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\airbackup\airbackupsc.exe

Digital Signature

Signed by:

TeamViewer GmbH

Authority:

Symantec Corporation

Valid from:

3/3/2015 1:00:00 AM

Valid to:

3/3/2018 12:59:59 AM

Subject:

CN=TeamViewer GmbH, O=TeamViewer GmbH, L=Goeppingen, S=Baden-Wuerttemberg, C=DE

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

1861461E7696B977D596CCCBD0082F76

File PE Metadata

Compilation timestamp:

5/27/2015 7:02:15 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:RntXbTDlGIMJJWwnOAFM7QnB2JC7GK24ao+H36dH4j:xtDlGIMJJHnZF4QB2C524B63mYj

Entry address:

0x71890

Entry point:

48, 83, EC, 28, E8, C7, 03, 00, 00, 48, 83, C4, 28, E9, 3E, FC, FF, FF, FF, 25, B8, 35, 05, 00, FF, 25, AA, 35, 05, 00, FF, 25, 9C, 35, 05, 00, FF, 25, 8E, 35, 05, 00, FF, 25, 80, 35, 05, 00, FF, 25, 72, 35, 05, 00, FF, 25, 64, 35, 05, 00, FF, 25, 56, 35, 05, 00, FF, 25, 48, 35, 05, 00, FF, 25, 3A, 35, 05, 00, FF, 25, 2C, 35, 05, 00, FF, 25, 1E, 35, 05, 00, FF, 25, 10, 35, 05, 00, FF, 25, 02, 35, 05, 00, FF, 25, F4, 34, 05, 00, FF, 25, E6, 34, 05, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC... 
[+]

Code size:

779.5 KB (798,208 bytes)

Service

Display name:

airbackup Service Controller

Description:

Tracks and keeps launched processes which are needed for backup/restore/etc

Type:

Win32OwnProcess

Depends on:

RPCSS

The file airbackupsc.exe has been discovered within the following program.

airbackup by TeamViewer GmbH

12% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.