» zdbackup5.9.30.exe
Overview
Analysis
File Details
Programs (1)

zdbackup5.9.30.exe

Z-DBackup

Andreas Baumann

File name:

zdbackup5.9.30.exe

Publisher:

IMU-BerliNet (signed by Andreas Baumann)

Product:

Z-DBackup

Description:

Z-DBackup Datensicherung

Version:

5.09.0030

MD5:

33e1b8dc54c6f5e404fad2425603e6b4

SHA-1:

e06935b5c53883f73001af8c468128c0fd75f148

SHA-256:

6ad9629a96a35d66a5e0e91ddf6626c9a6f41772d4691b213fb33c99335e175c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 11:41:48 PM UTC (a few moments ago)

File size:

1.8 MB (1,882,216 bytes)

Product version:

5.09.0030

Original file name:

ZDBackup.exe

File type:

Executable application (Win32 EXE)

Language:

German (Germany)

Common path:

C:\ProgramData\z-manufaktur\z-dbackup\zdbackup5.9.30.exe

Digital Signature

Signed by:

Andreas Baumann

Authority:

Thawte, Inc.

Valid from:

1/10/2012 1:00:00 AM

Valid to:

2/19/2014 12:59:59 AM

Subject:

CN=Andreas Baumann, OU=SECURE APPLICATION DEVELOPMENT, O=Andreas Baumann, L=Berlin, S=Berlin, C=DE

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

753BC7598F9981E43A04D477D6382D3D

File PE Metadata

Compilation timestamp:

5/16/2012 2:39:59 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

24576:xgDCagVvg3hvZXDvZ7T8wJTjKY6PLjP2WatgiGAArogJtdC6RYaO0UIFV:xagUhvZXrBZJTjKY6P7+ztghBsI

Entry address:

0x20694

Entry point:

B8, 2C, 24, C6, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 54, E5, C1, C6, AF, 11, 1D, 90, 5E, 81, 1C, 22, AE, 4D, D5, 56, F8, 22, 6B, CD, 5A, 0E, BA, E3, 8C, 80, 50, 2E, 58, E3, E3, 89, CC, E0, DA, 05, 3D, 32, B0, B0, B7, 67, A4, 00, D7, CB, 91, D3, C9, 76, 50, 28, C3, 22, 7C, 7C, 9E, 12, A1, 86, 67, 21, 8E, DD, B2, 51, C1, 62, BA, DC, AF, A8, 83, 1E, EB, 31, 89, D2, AC, E6, 80, E6, 42, D0, 25, 1A, AD, B8, EA, CB, B0, 5B, E9... 
[+]

Packer / compiler:

PECompact v2

Code size:

6.9 MB (7,233,536 bytes)

The file zdbackup5.9.30.exe has been discovered within the following program.

Z-DBackup by IMU Andreas Baumann

www.z-dbackup.de.de

About 6% of users remove it

Scan zdbackup5.9.30.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.