home

IllyBackup.exe

prjBackupDB

Midland National Life Insurance Company

Publisher:
Sammons Financial Group  (signed by Midland National Life Insurance Company)

Product:
prjBackupDB

Version:
19.02.0001

MD5:
9593592bfbf517b1f5004673338d4782

SHA-1:
e5a5a74c90ada161df9c3caa349432eab575e4e7

SHA-256:
d78e1817a17712b0c720f2030b47cf58b7fabf92d4e453dbd49b0542eb2d955c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 6:53:25 AM UTC  (today)

File size:
2.8 MB (2,918,136 bytes)

Product version:
19.02.0001

Original file name:
IllyBackup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\midland lifesolutions\common files\illybackup.exe

Digital Signature
Signed by:
Midland National Life Insurance Company

Authority:
thawte, Inc.

Valid from:
1/26/2016 4:00:00 PM

Valid to:
12/7/2016 3:59:59 PM

Subject:
CN=Midland National Life Insurance Company, O=Midland National Life Insurance Company, L=Sioux Falls, S=South Dakota, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
3B14C0F0CE79EFEA6429B40AF1527D1E

File PE Metadata
Compilation timestamp:
3/21/2013 12:28:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:IZoWnrqGFJJqtpkZwULRJsBZK1k+4MzFXRHiQrJ6aiYYJ2f7/U7F3Wja:61rqGFJJqtjUFqbirCGiYYJ2DUY2

Entry address:
0x1930

Entry point:
68, 78, 1A, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 72, B7, 68, 1D, 25, 4E, D8, 4D, 8A, DC, FB, 75, 8C, E4, 9C, FD, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 70, 72, 6A, 42, 61, 63, 6B, 75, 70, 44, 42, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, A8, 2C, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, FC, 2C, 40, 00, 18, E0, 40, 00, 00, 00, 00, 00, A0, 88, 1B, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.5508

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
52 KB (53,248 bytes)

Scan IllyBackup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.