home

ib_bglaunch.exe

IBackup

Pro Softnet Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘IBackup Background process’.
Publisher:
Prosoftnet  (signed by Pro Softnet Corporation)

Product:
IBackup

Description:
IBackup Background

Version:
10.0.0.29

MD5:
3c57a0dc07c21af4bf5d0c4d10953b43

SHA-1:
0ceba0e4f0b3fd3cdfe76ae831d6fb51a9403762

SHA-256:
20c2bf9e27f808d0f9a84622d897b28d0c40e20ec037253b06ea8d490107b0fc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:32:50 PM UTC  (today)

File size:
149.5 KB (153,128 bytes)

Product version:
10.0.0.29

Copyright:
Copyright © Prosoftnet 2013

Original file name:
ib_bglaunch.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\ibackupwindows\ib_bglaunch.exe

Digital Signature
Signed by:
Pro Softnet Corporation

Authority:
Thawte, Inc.

Valid from:
2/13/2014 7:00:00 PM

Valid to:
2/14/2016 6:59:59 PM

Subject:
CN=Pro Softnet Corporation, OU=IT, O=Pro Softnet Corporation, L=Calabasas, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
68A7A5C7BD2B769D46DD66EE575B8C68

File PE Metadata
Compilation timestamp:
5/23/2014 8:36:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:UAwoYkihXvedVv802Q/QCTkR9eDrd7BoATSWoZ+VXDCUwx:UphXyZ802Q/QCTkE7BoATYP

Entry address:
0x339E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 98, 00...
 
[+]

Entropy:
5.9242

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
5 KB (5,120 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
IBackup Background process

Command:
"C:\Program Files\ibackupwindows\ib_bglaunch.exe"


Scan ib_bglaunch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.