» BackUp.exe
Overview
Analysis
File Details
Programs (1)

BackUp.exe

BackUp

CEZEO software Ltd.

This file is installed with the program BackUpTime.

File name:

BackUp.exe

Publisher:

CEZEO software Ltd. (signed and verified)

Product:

BackUp

Description:

Residental BackUp Tool and Scheduler

Version:

1, 7, 37, 38

MD5:

955e5f6d8be4725f49f41fe66d73ed15

SHA-1:

a3ac35851dbb2d1d0a4edda1fec3906526be4c4c

SHA-256:

7e4a832be524d489f80318e9d4de5050eaf5ca444d84375c659b7c39bb9a1d21

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/16/2024 7:58:35 PM UTC (today)

Scan engine

Detection

Engine version

Quick Heal

(Suspicious) - DNAScan

12.15.12.00

File size:

262.8 KB (269,136 bytes)

Product version:

1, 7, 37, 38

Trademarks:

http://www.cezeo.com

Original file name:

BackUp.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\cezeo software\backuptime\backup.exe

Digital Signature

Signed by:

CEZEO software Ltd.

Authority:

VeriSign, Inc.

Valid from:

4/13/2010 6:00:00 PM

Valid to:

4/14/2011 5:59:59 PM

Subject:

CN=CEZEO software Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CEZEO software Ltd., L=St.Petersburg, S=St.Petersburg, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1D80EBD7047D4340C581E0F7B35B8565

File PE Metadata

Compilation timestamp:

2/2/2011 4:34:50 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:uyIKIVKmXhUfBnlo5Wt0k2MXDCbtx7McJGux:KXnUFWllt/Mux

Entry address:

0x1000

Entry point:

68, 01, 30, 45, 00, E8, 01, 00, 00, 00, C3, C3, CB, FC, B5, C2, 22, C0, D6, 7F, C1, 1D, E1, 92, F6, 0E, EF, BD, B9, E6, F5, B4, 11, 27, 4E, 10, 39, 03, 98, 5D, F8, ED, 4D, 20, 4B, 11, 65, F0, B3, 5B, 41, 87, 9F, A0, 3D, B1, B1, 3E, C2, 73, 2D, 94, F1, C0, 50, 72, AD, D8, 0C, DE, 8F, 55, 10, 50, E9, E0, BF, C1, F0, 88, 63, 32, E4, 5E, 66, 92, 54, C7, B1, D6, 33, 4F, 79, D0, B0, 30, 08, F9, 0C, 17, 57, 74, F4, 92, 19, 4E, 08, B6, B4, C9, 9C, D0, 1F, DF, F3, 59, 39, 14, D2, D1, 4A, 8F, 3A, 0C, 24, B3, 04, 80... 
[+]

Entropy:

7.1040

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

142 KB (145,408 bytes)

The file BackUp.exe has been discovered within the following program.

BackUpTime by CEZEO software Ltd.

Publisher's description - “We have created BackUpTime just for that reason - to provide you with a way to securely store your most important data. Hey, if you work around computers, you know how often surprises happen. And even when computer works fine, well, then our memory can fail us.”

www.cezeo.com/products/backuptime

4% remove it

Scan BackUp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.