» BIBLauncher.exe
Overview
Analysis
File Details
Programs (1)

BIBLauncher.exe

Business-in-a-Box Launcher

BizTree Inc.

This file is installed with the program Business-in-a-Box.

File name:

BIBLauncher.exe

Publisher:

BizTree Inc. (signed and verified)

Product:

Business-in-a-Box Launcher

Description:

Business-in-a-Box Launcher Application

Version:

1, 0, 0, 0

MD5:

ca47a0fee4697945491722ca4f6c06a9

SHA-1:

a883082eda985c2bc0ba16dd51d139fb69772179

Scanner detections:

7 / 68

Status:

Inconclusive (probably just false positive detections)

Analysis date:

12/27/2024 9:41:56 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/Execryptor

7.1.1

Bkav FE

HW32.TsCabk

1.3.0.4959

NANO AntiVirus

Trojan.Win32.FakeAVJO.ccgkes

0.28.2.61942

Norman

Suspicious_Gen4.EUGGB

11.20140914

Sophos

Mal/FakeAV-JO

4.98

Trend Micro House Call

TROJ_GEN.R0C1H08F714

7.2.257

VIPRE Antivirus

Trojan.Win32.Generic

32960

File size:

571.7 KB (585,432 bytes)

Product version:

1, 0, 0, 0

Original file name:

BIBLauncher.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\business-in-a-box\biblauncher.exe

Digital Signature

Signed by:

BizTree Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

5/11/2008 7:00:00 PM

Valid to:

5/9/2009 6:59:59 PM

Subject:

CN=BizTree Inc., OU=ENVISION SBS, O=BizTree Inc., L=Montreal, S=Quebec, C=CA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

46D7919F4F09A93F9C0C4208C2D47F8D

File PE Metadata

Compilation timestamp:

8/13/2008 12:55:28 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

12288:5IZoVTeUItElmzOEehTDyQKXWgNYIT3MDJscQ8JXPn2R:5ImleUItEYOX2hbcV28JXPn6

Entry address:

0x17FCE0

Entry point:

E8, 3B, FF, FF, FF, 05, 70, 32, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, 44, 9E, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, EF, 8B, 31, F9, D8, 44, 0D, AB, 47, 2A, 66, F0, B2, F1, CF, AC, 29, 51, A8, 74, F6, C7, 88, BD, 21, 25, 33, F0, D0, B4, 52, C7, A1, 20, 19, 9A, 61, 81, 1B, 9B, 38, 39, CC, E8, FF, 39, EC, A0, 1F, B7, DC, DD, EE, 9E, 81, CE, DF, DC, 9F, C4, 07, 14, 40, FE, 7E, 17, 00, 5C, C1, 2E, CA, 41, 20, AF, 6A, 40, E1, 08, 90, 2A, 42, 47, EE, 70, 71, 0D, 4D, 96, 8A, 46, 03, C8... 
[+]

Entropy:

7.9549 (probably packed)

Code size:

532 KB (544,768 bytes)

The file BIBLauncher.exe has been discovered within the following programs.

Business-in-a-Box by Biztree Inc.

Publisher's description - “Business-in-a-Box helps you complete a wide range of activities, from contract writing to daily communications, client acquisition, business management, HR management, accounting and more.”

www.biztree.com

About 9% of users remove it

Scan BIBLauncher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.