home

msidb.exe

Windows Installer

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Windows Installer

Description:
Windows® Installer Table Creator

Version:
3.1.4000.1830

MD5:
205fbb37784803c383c8e350f8e6b2a3

SHA-1:
af72034dd56eee71f63a1206016509f6a373a43d

SHA-256:
0e2de666d4523e4a74a52ef7b51e10467c8b032f26f4325e9c92b3a243036b98

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 11:40:53 AM UTC  (today)

File size:
121 KB (123,904 bytes)

Product version:
3.1.4000.1830

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
msidb.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\microsoft platform sdk\bin\msidb.exe

File PE Metadata
Compilation timestamp:
3/25/2005 2:30:17 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1536:kAHgfyoN5ymlfHPKVoQa/VBsUSQHAXiJAYtFNHlgQ/X:kAHgfyeP9QoL9LAYtFly

Entry address:
0x5324

Entry point:
6A, 60, 68, 60, 17, 00, 01, E8, 68, 18, 00, 00, 83, 65, FC, 00, 8D, 45, 90, 50, FF, 15, 78, 10, 00, 01, 83, 4D, FC, FF, BB, 94, 00, 00, 00, 53, 6A, 00, 8B, 3D, 74, 10, 00, 01, FF, D7, 50, FF, 15, 70, 10, 00, 01, 8B, F0, 85, F6, 0F, 84, 78, 01, 00, 00, 89, 1E, 56, FF, 15, 6C, 10, 00, 01, 56, 6A, 00, 85, C0, 75, 0E, FF, D7, 50, FF, 15, 68, 10, 00, 01, E9, 5A, 01, 00, 00, 8B, 46, 10, A3, 14, F0, 00, 01, 8B, 46, 04, A3, 20, F0, 00, 01, 8B, 46, 08, A3, 24, F0, 00, 01, 8B, 46, 0C, 25, FF, 7F, 00, 00, A3, 18, F0...
 
[+]

Entropy:
4.3636

Code size:
49 KB (50,176 bytes)

The file msidb.exe has been seen being distributed by the following URL.

http://www.baidupcs.com/.../205fbb37784803c383c8e350f8e6b2a3?fid=1694813421-250528-1897834857&time=1362216308&sign=FDTA-DCb740ccc5511e5e8fedcff06b081203-1r3arBSEDeLB2xzR22EdHV5mzpo=&expires=8h&sh=1&response-cache-control=private

Scan msidb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.