home

lbackup.exe

LiveBackup Pro 2013

concept/design fuer Information, Bild und Datenverarbeitung GmbH

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘lbackup’.
Publisher:
concept/design GmbH  (signed by concept/design fuer Information, Bild und Datenverarbeitung GmbH)

Product:
LiveBackup Pro 2013

Version:
2.0.0.0

MD5:
5073d27988752647c2a962826f9229d6

SHA-1:
970c0dc50bd21b424f33f00c74b60fb213705976

SHA-256:
bf9aff9070c7c15b5e5e3092c03dd31e28b5b8454fef6923ccb2621080737cac

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:15:17 PM UTC  (a few moments ago)

File size:
2.1 MB (2,179,272 bytes)

Product version:
2.x

Copyright:
(c) 2009, 2012 concept/design GmbH

Trademarks:
(c) 2009, 2012 concept/design GmbH

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\concept design\livebackup pro 2013\lbackup.exe

Digital Signature
Signed by:
concept/design fuer Information, Bild und Datenverarbeitung GmbH

Authority:
Thawte, Inc.

Valid from:
5/21/2012 5:00:00 PM

Valid to:
7/7/2013 4:59:59 PM

Subject:
CN="concept/design fuer Information, Bild und Datenverarbeitung GmbH", OU=Software Development, O="concept/design fuer Information, Bild und Datenverarbeitung GmbH", L=Detmold, S=Nordrhein Westfalen, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2DB971AE719AA324EB04781A6C448C9E

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:qpCagLrYK6aQ6ZzVlgMcogSfsvtszzljBondYCTzDncr31axg6JURV+5:qptCYK6aQ6mMcovusvonuCrMMJUf+5

Entry address:
0x1000

Entry point:
68, 01, 90, 90, 00, E8, 01, 00, 00, 00, C3, C3, A0, B5, 46, 67, E9, 8D, F5, 2D, 0C, CC, D4, F2, FE, EA, 3A, AF, 1E, 77, BB, 69, 4A, 32, DD, 26, AF, 2B, 19, 27, AE, 66, 85, C0, FC, 21, 91, E1, 18, 86, BA, 63, F4, 18, 08, DD, CA, 49, B1, 95, 19, DD, 36, D6, 8E, D8, DB, 98, D5, AE, 4E, 52, 83, 26, B8, 12, 89, 0D, F8, 6C, B5, 8B, B9, AB, A2, 16, 9D, 6A, D9, 1B, CE, D5, E4, 92, 23, 40, E3, 2E, 77, F1, FB, F7, ED, 5B, 94, A8, 81, 65, 32, B1, 81, 73, 02, 7D, C6, 89, C3, 04, 13, D4, 2F, B1, 41, FB, 99, 0C, 8F, 27...
 
[+]

Entropy:
7.9832

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
3.9 MB (4,114,944 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
lbackup

Command:
"C:\Program Files\concept design\livebackup pro 2013\lbackup.exe" \autostart


Scan lbackup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.