home

MBProcessOrganizer.exe

MB Process Organizer

MB Limited LLC

Publisher:
MB Limited LLC  (signed and verified)

Product:
MB Process Organizer

Description:
Process Organizer

Version:
1.5.3.2

MD5:
803f700271332e7bdc463a9d60cf7979

SHA-1:
082603e6de680b42647b27f5970a5c783a0fcef2

SHA-256:
33a944585d596e19ca6f6432d6c3f537d961a99deefc2e89e1f3a577d07f1bda

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 12:30:29 PM UTC  (today)

File size:
3.7 MB (3,924,760 bytes)

Product version:
1.5.3.2

Copyright:
Copyright © 2010, 2011, 2012, 2013, 2014, 2015, 2016

Original file name:
MBProcessOrganizer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\apps\2.0\029nmph9.zr7\o34zc6ym.lnw\mbpr..tion_204a45b7a8e7c405_0001.0005_6b26c441925fd553\mbprocessorganizer.exe

Digital Signature
Signed by:
MB Limited LLC

Authority:
thawte, Inc.

Valid from:
3/15/2015 8:00:00 PM

Valid to:
3/21/2017 7:59:59 PM

Subject:
CN=MB Limited LLC, O=MB Limited LLC, L=Palatine, S=Illinois, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
0AF6D9F88984B9E06A6EB6A1A3329568

File PE Metadata
Compilation timestamp:
11/21/2016 11:00:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
48.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:nfHUXwAfKHXmKHX+KHXmKHXOKHXuKHX8KJ2PKwrKHX:nf0ZK3mK3+K3mK3OK3uK3HiKwrK3

Entry address:
0x3A85DA

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 03, 00, 03, 00, 00, 00, 28, 00, 00, 80, 0E, 00, 00, 00, D8, 00, 00, 80, 10, 00, 00, 00, 08, 01, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 05, 00, 01, 00, 00, 00, 60, 00, 00, 80, 02, 00, 00, 00, 78, 00, 00, 80, 03, 00, 00, 00, 90, 00, 00, 80, 04, 00, 00, 00, A8, 00, 00, 80, 05, 00...
 
[+]

Entropy:
7.1744

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3.6 MB (3,827,200 bytes)

Scan MBProcessOrganizer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.