home

backup_agent_for_windows_web_es-es.exe

Backup Agent installer

Acronis International GmbH

This is a self-extracting archive and installer. The file has been seen being downloaded from us-bc-baas.acronis.com and multiple other hosts.
Publisher:
Acronis International GmbH  (signed and verified)

Product:
Backup Agent installer

Version:
12,0,0,1299

MD5:
c5a6a151dd96d19423a5c6b9fbe1df77

SHA-1:
45e4feda9ef37b8b2f9c819dc38a9e5c680ce2c8

SHA-256:
d40d390c913fa2926eb50df48982ca563588c1175180a3f0358cf8887e6049c2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 11:16:04 PM UTC  (a few moments ago)

File size:
9.9 MB (10,397,632 bytes)

Product version:
12,0,0,1299

Copyright:
Copyright (C) Acronis International GmbH 2002-2015

Original file name:
atie_installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\backup_agent_for_windows_web_es-es.exe

Digital Signature
Signed by:
Acronis International GmbH

Authority:
VeriSign, Inc.

Valid from:
8/28/2012 2:00:00 AM

Valid to:
8/29/2015 1:59:59 AM

Subject:
CN=Acronis International GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Acronis International GmbH, L=Schaffhausen, S=Schaffhausen, C=CH

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
16437AAA13F5543F67E10E03893EA315

File PE Metadata
Compilation timestamp:
8/16/2015 7:01:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:fRfN76YTpxenANNnR4EzPBuxGQSgkyfmHKB+vnWwQhmzJs3Cn1Vc9G3itXrlF8DJ:FNrHNNnRZrBujp0DMOGhy8cLCgpxf

Entry address:
0x47CB9C

Entry point:
E8, C8, A6, 00, 00, E9, 17, FE, FF, FF, 8B, 44, 24, 04, A3, E8, 60, CB, 00, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, 08, 73, C4, 00, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00, 00, 89, 95, 80, 00, 00, 00, 89, 5D, 7C, 89, 75, 78, 89, 7D, 74, 66, 8C, 95, A0, 00, 00, 00, 66, 8C, 8D, 94, 00, 00, 00, 66, 8C, 5D, 70, 66, 8C, 45, 6C, 66, 8C, 65, 68, 66, 8C, 6D, 64, 9C, 8F, 85, 98, 00, 00, 00, 8B, B5, AC, 02, 00, 00, 8D, 85, AC, 02, 00, 00, 89, 85, 9C, 00...
 
[+]

Code size:
6.5 MB (6,837,248 bytes)

The file backup_agent_for_windows_web_es-es.exe has been seen being distributed by the following 3 URLs.

https://us-bc-baas.acronis.com/api/ams/links/.../redirect?language=es&system=windows&productType=enterprise&login=acronisdef@imcacronisangelm201511061248.com

https://bc-baas.acronis.com/api/ams/links/.../redirect?language=es&system=windows&productType=enterprise&login=caballerocc

https://bc-baas.acronis.com/api/ams/links/.../redirect?language=es&system=windows&productType=enterprise&login=ccaballero

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.