Versions

1.0.0.0	1.04%
1.0.0.0	1.04%
1.0.0.0	1.04%
1.0.0.0	2.08%
1.0.0.0	5.21%
1.0.0.0	3.13%
1.0.0.0	3.13%
1.0.0.0	2.08%
1.0.0.0	1.04%
1.0.0.0	8.33%
1.0.0.0	2.08%
1.0.0.0	15.63%
1.0.0.0	10.42%
1.0.0.0	2.08%
1.0.0.0	1.04%
1.0.0.0	32.29%
1.0.0.0	2.08%
1.0.0.0	6.25%

There are 18 versions of backupstack.exe in the wild, the latest version being 1.0.0.0. It is started as a Windows Service called 'Computer Backup (MyPC Backup)' with the name 'BackupStack'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 33.54 KB. The file is a digitally signed and issued to JDI BACKUP LIMITED by VeriSign. The programs MyPC Backup, JustCloud and NovatechCloud have been observed as installing specific variations of backupstack.exe. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 54.09 MB. Addionally, typically read and write I/O disk operations is about 2.62 MB per minute for reads and 98.01 KB per minute for writes.