home

id_tray.exe

Bask Backup

Pro Softnet Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘IDrive Tray’.
Publisher:
Prosoftnet  (signed by Pro Softnet Corporation)

Product:
Bask Backup

Description:
Bask Backup Tray

Version:
6.5.1.26

MD5:
42678a1d5e2f45045e9f12d393927040

SHA-1:
4b5b1cdef15e89f5e48c1b75b3f2d8a2dec43408

SHA-256:
9075210a49ad36e8ea37666889ddda089d52aff9019283f7be23ea35ded5793b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 2:24:55 PM UTC  (today)

File size:
2 MB (2,084,072 bytes)

Product version:
6.5.1.26

Copyright:
Copyright © Prosoftnet 2013

Original file name:
id_tray.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\baskbackupwindows\id_tray.exe

Digital Signature
Signed by:
Pro Softnet Corporation

Authority:
thawte, Inc.

Valid from:
1/20/2016 4:00:00 PM

Valid to:
2/13/2018 3:59:59 PM

Subject:
CN=Pro Softnet Corporation, OU=IT, O=Pro Softnet Corporation, L=Calabasas, S=California, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
65308A80227C96C224AE729EC0096CCC

File PE Metadata
Compilation timestamp:
2/7/2017 5:40:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x1F03CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 88, 00, 00, 80, 10, 00, 00, 00, A0, 00, 00, 80, 18, 00, 00, 00, B8, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 09, 00, 02, 00, 00, 00, D0, 00, 00, 80, 03, 00, 00, 00, E8, 00...
 
[+]

Entropy:
6.4368

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.9 MB (2,024,448 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
IDrive Tray

Command:
"C:\Program Files\baskbackupwindows\id_tray.exe" min


Scan id_tray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.