home

myboxscheduler.exe

Vayosoft Backup

Vayosoft Ltd

It runs as a separate (within the context of its own process) windows Service named “Partner Backup Scheduler”.
Publisher:
Vayosoft Network Technologies Ltd.  (signed by Vayosoft Ltd)

Product:
Vayosoft Backup

Description:
Vayosoft PC Backup Scheduler Service

Version:
1.0.6.1

MD5:
335406725339bf854e2c6978b44b9e7f

SHA-1:
f86cbca3ae4dbd5fcf45b1727ecf9f7cb66d07e2

SHA-256:
52f6c80c9e3aebc2407627b49e6fc8d20d1659fba5fc76fe0ada48f2d621ad39

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 7:42:44 AM UTC  (today)

File size:
1.5 MB (1,624,768 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2012-2016 Vayosoft Network Technologies Ltd.

Trademarks:
Copyright © 2012-2016 Vayosoft Network Technologies Ltd.

Original file name:
VBkpScheduler.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\myboxscheduler.exe

Digital Signature
Signed by:
Vayosoft Ltd

Authority:
thawte, Inc.

Valid from:
10/8/2015 3:00:00 AM

Valid to:
10/8/2017 2:59:59 AM

Subject:
CN=Vayosoft Ltd, OU=Development, O=Vayosoft Ltd, L=Beer Sheva, S=Israel, C=IL

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
363CC0360920920BF6F9DAB491B40FF1

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:I9pN3MEyrZne9d1ndI0DcBmOGo/NJ7fD4GukjPavCTg0gQBpMB85Ts7N/5:IXU6HiTYOGo/H4GukjP9gdLB85QR

Entry address:
0x129514

Entry point:
55, 8B, EC, B9, 0A, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, B8, 84, 90, 52, 00, E8, BC, E5, ED, FF, 33, C0, 55, 68, FA, 98, 52, 00, 64, FF, 30, 64, 89, 20, A1, 28, 4E, 54, 00, 66, 83, 48, 06, 01, 8D, 4D, EC, 33, D2, B8, 0C, 99, 52, 00, E8, A5, 99, FE, FF, 83, 7D, EC, 00, 75, 1B, 68, 10, 10, 20, 00, 68, 10, 99, 52, 00, 68, 1C, 99, 52, 00, 6A, 00, E8, 05, F3, ED, FF, E8, B4, B9, ED, FF, 8D, 55, E4, B8, 01, 00, 00, 00, E8, F7, 99, ED, FF, 8B, 45, E4, 8D, 55, E8, E8, A4, 09, EE, FF, 8B, 55, E8, B8...
 
[+]

Entropy:
6.5296

Developed / compiled with:
Microsoft Visual C++

Code size:
1.2 MB (1,215,488 bytes)

Service
Display name:
Partner Backup Scheduler

Service name:
PartnerBkpSched

Description:
Manages Scheduled Backups for Partner Backup. If this service is stopped or disabled, Scheduled Backups will not be done.

Type:
Win32OwnProcess

Depends on:
Tcpip RpcSs


Scan myboxscheduler.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.