home

ib_bglaunch.exe

IBackup

Pro Softnet Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘IBackup Background process’.
Publisher:
Prosoftnet  (signed by Pro Softnet Corporation)

Product:
IBackup

Description:
IBackup Background

Version:
11.1.0.14

MD5:
1af9e846b7b11c5b6fc07ea0a15ce4e3

SHA-1:
17875e0e86ce470dfdda8571f8cce4545d6217c6

SHA-256:
a1e6b36a8a89380f5ab4e0abe6fde1059bbcd6f8e6dee1f55fcab82ac50c55b9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 7:34:34 PM UTC  (today)

File size:
156.2 KB (159,984 bytes)

Product version:
11.1.0.14

Copyright:
Copyright © Prosoftnet 2013

Original file name:
ib_bglaunch.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\ibackupwindows\ib_bglaunch.exe

Digital Signature
Signed by:
Pro Softnet Corporation

Authority:
thawte, Inc.

Valid from:
1/21/2016 1:00:00 AM

Valid to:
2/14/2018 12:59:59 AM

Subject:
CN=Pro Softnet Corporation, OU=IT, O=Pro Softnet Corporation, L=Calabasas, S=California, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
65308A80227C96C224AE729EC0096CCC

File PE Metadata
Compilation timestamp:
3/10/2017 3:04:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

Entry address:
0x4DDE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 98, 00, 00, 80, 10, 00, 00, 00, B0, 00, 00, 80, 18, 00, 00, 00, C8, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 0B, 00, 02, 00, 00, 00, E0, 00, 00, 80, 03, 00, 00, 00, F8, 00, 00, 80, 04, 00, 00, 00, 10, 01, 00, 80, 05, 00, 00, 00, 28, 01...
 
[+]

Entropy:
5.9680

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
11.5 KB (11,776 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
IBackup Background process

Command:
"C:\Program Files\ibackupwindows\ib_bglaunch.exe" min


Scan ib_bglaunch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.