home

ibackground_955.exe

IBackup for Windows

Pro Softnet Corp

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘IBWin Background process’.
Publisher:
Pro Softnet Corporation  (signed by Pro Softnet Corp)

Product:
IBackup for Windows

Version:
9.05.0005

MD5:
a009ac131d1ae2eceef539190ac9fc9c

SHA-1:
eb80369b320b4addd1864c5245641542cd2d3062

SHA-256:
ea4edb731ba23a6c9e2edf06be14cc3d3e72343b71c2772fef6ff72c9cc586b6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:05:53 AM UTC  (today)

File size:
37.5 KB (38,376 bytes)

Product version:
9.05.0005

Copyright:
(C) Copyright Pro Softnet Corporation.

Original file name:
IBackground.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Pro Softnet Corp

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/24/2010 8:00:00 PM

Valid to:
4/17/2012 7:59:59 PM

Subject:
CN=Pro Softnet Corp, OU=IT, O=Pro Softnet Corp, L=Woodland Hills, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
5FD54221975C8951F96497592F560A74

File PE Metadata
Compilation timestamp:
4/14/2011 2:53:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:nvqL7+ZoWYKE7CAJ30PFvNxFvir7yd93wiPmmAuj30DK0sQxjRucHnNYE1LLE:nSLcJkYPFvNxFvk7qmnuzO6iMunRLLE

Entry address:
0x15F8

Entry point:
68, 34, 17, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 64, 4C, 50, EA, 2A, 4E, 9E, 4C, B3, 43, B6, F2, 93, F7, 80, 61, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, E0, CF, FC, 00, 49, 42, 61, 63, 6B, 67, 72, 6F, 75, 6E, 64, 00, 08, C1, 40, 00, 00, 00, 00, 00, 06, 00, 00, 00, F4, 23, 40, 00, 07, 00, 00, 00, DC, 20, 40, 00, 07, 00, 00, 00, 94, 20, 40, 00, 07, 00, 00, 00, 4C, 20, 40, 00, 07, 00, 00, 00, F4, 1F, 40, 00, 07, 00, 00, 00, AC, 1F, 40, 00...
 
[+]

Entropy:
4.7442

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
20 KB (20,480 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
IBWin Background process

Command:
"C:\ibackup for windows\ibackground_955.exe"


Scan ibackground_955.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.