home

mdbplus.exe

MD5:
9eb95622a975a3aa178fcae4b8a2e89a

SHA-1:
21f562f4d8a7de80fd3eb186d33467bf3ebeeeff

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:19:11 AM UTC  (today)

File size:
4.1 MB (4,336,128 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mdb viewer\mdbplus.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:uOheZo+gTLMN5+vuaz9vp0a7sGFHrHAHU/H0H:ukxmGFHrHAHU/H0H

Entry address:
0x22236C

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 7C, 1A, 62, 00, E8, 11, 55, DE, FF, A1, 74, 9F, 62, 00, 8B, 00, E8, A1, 50, E8, FF, A1, 74, 9F, 62, 00, 8B, 00, BA, D8, 29, 62, 00, E8, 88, 4C, E8, FF, 8B, 0D, 68, A3, 62, 00, A1, 74, 9F, 62, 00, 8B, 00, 8B, 15, 18, 51, 61, 00, E8, 90, 50, E8, FF, 8B, 0D, A8, A0, 62, 00, A1, 74, 9F, 62, 00, 8B, 00, 8B, 15, 14, 62, 5F, 00, E8, 78, 50, E8, FF, 8B, 0D, EC, 9F, 62, 00, A1, 74, 9F, 62, 00, 8B, 00, 8B, 15, 14, C6, 60, 00, E8, 60, 50, E8, FF, 8B, 0D, 98, 94, 62, 00, A1, 74...
 
[+]

Entropy:
6.3130

Developed / compiled with:
Microsoft Visual C++

Code size:
2.1 MB (2,234,880 bytes)

The file mdbplus.exe has been seen being distributed by the following 17 URLs.

http://www.netzwelt.de/.../18341_2-mdb-viewer-plus.html?sig=35b7fc7cedd7ee57ae8cb3541e16ae7b

https://mdb-viewer-plus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPxJrO1TsV2ZQoV4i4Pnuvz5BfvcJF5YcB ioRo OYiFR2CqCtqETcS5eX2ukULpBM6/.../4pnhfnVIHp8mJBvc=

http://lb.cdn.m6web.fr/d/c/a/5a10bfbc6716b5bf631843cda6b5e8dd/57339fc8/soft/.../mdb-viewer-plus_2-50_fr_121324.exe

http://mdb-viewer-plus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPxJrO1TsV2ZQoV4i4Pnuvz5BfvcJF5YcB ioRo OYiFR2CqCtqETcS5eX2ukULpBM6/.../4pnhfnVIHp8mJBvc=

http://lb.cdn.m6web.fr/d/c/a/aac564ce4c5c9ec3ab293a5809713c4e/56672b9e/soft/.../mdb-viewer-plus_2-50_fr_121324.exe

http://ultradownloads.com.br/.../2,1007970.html

http://www.netzwelt.de/.../18341_2-mdb-viewer-plus.html?sig=99a76439e170d9e52e7a7ddd05eef0b2

http://www.netzwelt.de/.../18341_2-mdb-viewer-plus.html?sig=793938775cc1aff391a63dc7d445865a

http://lb.cdn.m6web.fr/d/c/a/1944b0d655e5076145884988a7289eb6/56acd63d/soft/.../mdb-viewer-plus_2-50_fr_121324.exe

http://soft.mydiv.net/win/dlfilee198c_250258/.../MDBPlus.exe

http://www.programosy.pl/.../pobierz,mdb-viewer-plus,2.html

http://download.softpedia.com/dl/1393a75cc7b4c82458a2293b381bac2f/54c8a636/100037333/software/.../MDBPlus.exe

http://indir.gezginler.net/i/2473/.../

http://www.slunecnice.cz/sw/mdb-viewer-plus/stahnout/.../

http://download1uk.softpedia.com/dl/962c416451595ea69fbe6e1baaaeb24a/5363493a/100037333/software/.../MDBPlus.exe

http://www.alexnolan.net/.../MDBPlus.exe

http://mdb-viewer-plus.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPxJrO1TsV2ZQoV4i4Pnuvz5BfvcJF5YcB ioRo OYiFR2CqCtqETcS5eX2ukULpBM6/.../4pnhfnVIHp8mJBvc=

Scan mdbplus.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.