home

BIBLauncher.exe

Business-in-a-Box Launcher

Biztree Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘BIBLauncher’.
Publisher:
Biztree Inc.  (signed and verified)

Product:
Business-in-a-Box Launcher

Description:
Business-in-a-Box Launcher Application

Version:
1, 0, 0, 0

MD5:
09dc1a19ee3b56f2abe96e3fbcaf5ba0

SHA-1:
8f22f1d1c1e205db271cc228a924ad87e1651209

SHA-256:
1d203c0f9dd9afc139a3d0e320e0364afef20946590d580f284d68c515a55ec6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 9:12:57 AM UTC  (today)

File size:
711.7 KB (728,808 bytes)

Product version:
1, 0, 0, 0

Copyright:
Copyright (C) 2009

Original file name:
BIBLauncher.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Biztree Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
7/2/2009 1:00:00 AM

Valid to:
5/7/2010 12:59:59 AM

Subject:
CN=Biztree Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Biztree Inc., L=MONTREAL, S=QUEBEC, C=CA

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
3069F3B8DD854C32DB7FD3895A632D33

File PE Metadata
Compilation timestamp:
7/22/2009 3:11:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:tIQIQIQIk666p2Bmq67IcWDu9DiYA7C2gp5vowESi0IycQVy/4fmvKD+ulVE6KRI:tIQIQIQISBmt7lWC9ux7C2gp5w+IK64J

Entry address:
0x1B4CB5

Entry point:
E8, 3B, FF, FF, FF, 05, 22, 83, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, CE, 43, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, AB, 7E, A6, 90, 00, 2F, 1B, 65, 8F, DD, 10, 3A, 7A, 53, 7C, 13, 2F, 12, 09, 51, 86, 2F, 1D, CE, 02, 9C, BE, DC, 6C, 86, A1, E1, B6, 10, BA, E0, AC, 5C, 73, C9, CF, B8, 6E, 0B, CF, CE, 47, 22, 9F, 19, 10, 1F, AB, 8F, C9, 78, 55, 37, 6D, F4, F0, D3, 79, 87, 1D, EA, C6, 5B, A2, DA, 30, F1, 57, 1A, A3, 80, D9, F9, 81, FC, 2C, DB, 0D, CB, B1, E2, 9B, 90, 0E, 79, 3F, DC...
 
[+]

Entropy:
7.8244  (probably packed)

Code size:
544 KB (557,056 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BIBLauncher

Command:
C:\users\{user}\desktop\biblauncher.exe


Scan BIBLauncher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.