home

ibackground_955.exe

IBackup for Windows

Pro Softnet Corp

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘IBWin Background process’.
Publisher:
Pro Softnet Corporation  (signed by Pro Softnet Corp)

Product:
IBackup for Windows

Version:
9.05.0005

MD5:
68cd2e59e3ed30d13ac42f51a42058a2

SHA-1:
3773697992bce88d1a38a45dc32996bc16f5840b

SHA-256:
f7a0b8df2f6883d11921c034055fe623098c6c3e6907feaa393ec4b18261fc9b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:10:24 PM UTC  (today)

File size:
37.5 KB (38,376 bytes)

Product version:
9.05.0005

Copyright:
(C) Copyright Pro Softnet Corporation.

Original file name:
IBackground.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Pro Softnet Corp

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/24/2010 7:00:00 PM

Valid to:
4/17/2012 6:59:59 PM

Subject:
CN=Pro Softnet Corp, OU=IT, O=Pro Softnet Corp, L=Woodland Hills, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
5FD54221975C8951F96497592F560A74

File PE Metadata
Compilation timestamp:
8/8/2011 8:41:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:gl7W9yCO/9vL+9v96nYYFl14oztaNG6wMFnRLL3:8R9vC9vNe4ozcdwMFnRLz

Entry address:
0x160C

Entry point:
68, 48, 17, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 93, 50, 98, 0D, 4E, 62, DB, 4F, A1, 90, 56, 70, 8A, 5A, A3, 9B, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 43, 30, 30, 30, 2D, 49, 42, 61, 63, 6B, 67, 72, 6F, 75, 6E, 64, 00, 7D, 23, 32, 2E, 00, 00, 00, 00, 06, 00, 00, 00, 08, 24, 40, 00, 07, 00, 00, 00, F0, 20, 40, 00, 07, 00, 00, 00, A8, 20, 40, 00, 07, 00, 00, 00, 60, 20, 40, 00, 07, 00, 00, 00, 08, 20, 40, 00, 07, 00, 00, 00, C0, 1F, 40, 00...
 
[+]

Entropy:
4.8183

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
20 KB (20,480 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
IBWin Background process

Command:
"C:\ibackup for windows\ibackground_955.exe"


Scan ibackground_955.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.