» bkmaker.exe
Overview
Analysis
File Details
Behaviors (1)

bkmaker.exe

BackUp Maker

ASCOMP Software GmbH

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.

File name:

bkmaker.exe

Publisher:

ASCOMP Software GmbH (signed and verified)

Product:

BackUp Maker

Description:

Backup Software

Version:

7.2.0.1

MD5:

72ce2a9dc9505e63115977d22c75b93b

SHA-1:

dd19d76441b168b4230532ae98769e3e96665515

SHA-256:

ab716ad01e492e744b2e9e60ed12a5756bf29b0484279a53b54c950a825b3f81

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 3:04:38 PM UTC (today)

File size:

9.3 MB (9,793,360 bytes)

Product version:

7.2.0.1

Original file name:

bkmaker.exe

File type:

Executable application (Win32 EXE)

Language:

German (Germany)

Common path:

C:\Program Files\ascomp software\backup maker\bkmaker.exe

Digital Signature

Signed by:

ASCOMP Software GmbH

Authority:

Symantec Corporation

Valid from:

12/30/2015 1:00:00 AM

Valid to:

10/19/2016 1:59:59 AM

Subject:

CN=ASCOMP Software GmbH, O=ASCOMP Software GmbH, L=Gerlingen, S=Baden-Wuerttemberg, C=DE

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

35DDF200621EAB109B531E9D66732562

File PE Metadata

Compilation timestamp:

9/26/2016 11:30:59 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:7Xrzgsl6/WS62s6SzSezCIz/Mu102FKccC9r4imPq68VIvOkn+hpIwHp7L8rBXi2:8sCa6SzSePjd+quOQ

Entry address:

0x66E438

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, 18, C1, A5, 00, E8, 73, DE, 99, FF, 8B, 1D, AC, D4, A8, 00, 8B, 03, E8, A6, AA, B2, FF, 8B, 03, BA, A0, E5, A6, 00, E8, D2, A4, B2, FF, 8B, 03, C6, 40, 5B, 00, 8B, 0D, A0, CB, A8, 00, 8B, 03, 8B, 15, 30, 0F, A3, 00, E8, 99, AA, B2, FF, 8B, 0D, A4, D9, A8, 00, 8B, 03, 8B, 15, D8, 57, A0, 00, E8, 86, AA, B2, FF, 8B, 0D, A0, D0, A8, 00, 8B, 03, 8B, 15, DC, B2, A0, 00, E8, 73, AA, B2, FF, 8B, 0D, 5C, CE, A8, 00, 8B, 03, 8B, 15, DC, 31, A1, 00, E8, 60, AA, B2, FF, 8B, 0D, FC, D0... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

6.4 MB (6,737,920 bytes)

Scheduled Task

Task name:

BackUp_Maker-Ursula

Trigger:

Logon (Runs on logon)

Scan bkmaker.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.