home

PlSqlDev.exe

PL/SQL Developer

Allround Automations

Publisher:
Allround Automations

Product:
PL/SQL Developer

Version:
7.1.5.1398

MD5:
78ee2ac394ed35940fe4932f122f258c

SHA-1:
3d664314685fd968e86963beda8a66292456daec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 12:58:19 PM UTC  (today)

File size:
11.8 MB (12,385,088 bytes)

Product version:
7.1

Copyright:
Copyright © Allround Automations 1997 - 2008

Original file name:
PlSqlDev.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\plsql developer\plsqldev.exe

File PE Metadata
Compilation timestamp:
6/19/1992 10:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:Aes4OxmBWByTeBzDoP1/Py7QWJIazPPrmNfsMv2CtwUutHVWpfhDAfkM:AoOxhByTexC1/PcQWJIarPrmN1q1MA3

Entry address:
0x76CAA0

Entry point:
55, 8B, EC, 83, C4, E8, 53, 33, C0, 89, 45, EC, 89, 45, E8, B8, DC, 6A, B6, 00, E8, 3B, BE, 89, FF, 8B, 1D, C8, 89, B8, 00, 33, C0, 55, 68, 61, CB, B6, 00, 64, FF, 30, 64, 89, 20, 6A, 00, E8, CC, 82, 8A, FF, 8B, 03, E8, 19, F6, 96, FF, 8B, 03, BA, 78, CB, B6, 00, E8, 8D, F0, 96, FF, A1, 50, 91, B8, 00, BA, 94, CB, B6, 00, E8, BE, 94, 89, FF, 8B, 03, 83, C0, 50, E8, 60, 94, 89, FF, 8D, 55, E8, 8B, 03, E8, 1E, F0, 96, FF, 8B, 55, E8, 8D, 45, EC, E8, 07, 9F, 89, FF, 8B, 55, EC, A1, DC, 81, B8, 00, 8B, 00, E8...
 
[+]

Entropy:
6.6576

Developed / compiled with:
Microsoft Visual C++

Code size:
7.4 MB (7,781,376 bytes)

The file PlSqlDev.exe has been seen being distributed by the following URL.

https://doc-10-20-docs.googleusercontent.com/docs/securesc/am5e4ujsqtp57clr1lg749lglrbin8ht/tnv28kkvibo4laer4k3j00g435fa88tu/1462356000000/.../07041113243596193012/0B22n52kAgUhFTDd2TjQtSjdaMUU?e=download

Scan PlSqlDev.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.