» GBMAgent.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

GBMAgent.exe

Genie Agent

Genie-Soft

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘GBMHome8Agent’. This is installed with Genie Backup Manager Home 8.0.

File name:

GBMAgent.exe

Publisher:

Genie-Soft (signed and verified)

Product:

Genie Agent

Description:

Genie Backup Agent

Version:

8, 0, 36, 66

MD5:

4b381deadfd7d2c0ee6cc163dc042890

SHA-1:

263af83ef68674e691eaf55650097e1a0153d0a3

SHA-256:

74fca0ab702dbf69d14916ba17cd9b4e61fa4d268e16235ce26201edec93a4f7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 3:04:25 AM UTC (today)

File size:

220.6 KB (225,920 bytes)

Product version:

8, 0, 36, 66

Original file name:

GBMAgent.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\genie-soft\gbmhome8\gbmagent.exe

Digital Signature

Signed by:

Genie-Soft

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

4/22/2007 8:00:00 PM

Valid to:

4/22/2008 7:59:59 PM

Subject:

CN=Genie-Soft, OU=Secure Application Development, O=Genie-Soft, L=Amman, S=Amman, C=JO

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

323257786BCE4DF2E7ABB3BDCAACA9D5

File PE Metadata

Compilation timestamp:

10/24/2007 1:57:00 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

Entry address:

0x18ABB

Entry point:

E8, 2D, 06, 00, 00, E9, 36, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47, 8B, 54, 24, 10, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 14, 89, 54, 24, 10, 8B, 44, 24, 1C, 0B, C0, 7D, 14, 47, 8B, 54, 24, 18, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 1C, 89, 54, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 18, 8B, 44, 24, 14, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 10, F7, F1, 8B, D3, EB, 41, 8B, D8, 8B, 4C, 24, 18, 8B, 54, 24, 14, 8B, 44, 24, 10, D1, EB, D1, D9... 
[+]

Entropy:

6.0315

Code size:

108 KB (110,592 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

GBMHome8Agent

Command:

C:\Program Files\genie-soft\gbmhome8\gbmagent.exe

The file GBMAgent.exe has been discovered within the following program.

Genie Backup Manager Home 8.0 by Genie-Soft

Publisher's description - “Genie Backup Manager is a very easy to use yet powerful software that can backup and restore files, documents, emails, settings, programs and more to virtually storage location, including hard disks, FTP locations, across network, CD/DVD discs (using Sonic Solutions technology), removable media, and memory sticks.”

www.genie-soft.com/Home/Genie_Backup_Manager_Home/Overview.aspx

3% remove it

Scan GBMAgent.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.