home

backup & storage.exe

Virgin Media Ltd

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Backup & Storage’.
Publisher:
F-Secure  (signed by Virgin Media Ltd)

Description:
Backup & Storage

Version:
2,3,1,31082

MD5:
382b3a659e9129abe6c1801f3ab9aeda

SHA-1:
9928e0c80ac33214fd81dc916a453f3466538ead

SHA-256:
36531d45c214575ba35ccd3859e104ca73436efec1d1bc9e0180886888f307cd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 12:54:09 AM UTC  (today)

File size:
11.7 MB (12,273,328 bytes)

Product version:
2,3,1,31082

Copyright:
Copyright (C) F-Secure

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Program Files\virginmedia\v stuff backup\backup & storage.exe

Digital Signature
Signed by:
Virgin Media Ltd

Authority:
VeriSign, Inc.

Valid from:
2/25/2011 12:00:00 AM

Valid to:
3/27/2013 11:59:59 PM

Subject:
CN=Virgin Media Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=CTIO Technical Services, O=Virgin Media Ltd, L=Hook, S=Hampshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3D1F96113C5BBED92CEE40D0C81F5910

File PE Metadata
Compilation timestamp:
4/3/2011 2:02:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:clP4OSzRk+LuGyfUVao8BOfalwuUlBiKFdu9LLBN7HZ9b3rHSHilQCs1xihkwUhG:clPnS1LLursfalwtCKFdu9L7HZx7yCG+

Entry address:
0x36AE88

Entry point:
E8, 66, 0B, 00, 00, E9, 35, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 44, A6, 9B, 00, FF, 25, 48, A6, 9B, 00, FF, 25, 4C, A6, 9B, 00, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 60, 72, F5, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 60, 72, F5, 00, 33, C5, 50, 89, 65, F0, FF...
 
[+]

Entropy:
7.2781

Code size:
5.7 MB (6,000,640 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Backup & Storage

Command:
"C:\Program Files\virginmedia\v stuff backup\backup & storage.exe" \delayed


Scan backup & storage.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.