home

63100.bubble_dock.bbd023.no.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cdn.bubbledock.us.
MD5:
240ff1ada8aa662937f9f675a6a2b155

SHA-1:
708f083cf9abad193ade6aa7f5dcd648ad1d42fc

SHA-256:
dd899c2c9f787a9432b0d50800f8a44cf4045ce0d5cf92aedec638999248e9a4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/22/2024 8:29:24 PM UTC  (today)

File size:
5.2 MB (5,419,560 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\63100.bubble_dock.bbd023.no.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:sOKnlsTfjv7+pDB2bjMI57GuJ1ELQw885eFpsDeHqjpKtVSFuOoUGJb7lEi+MxvS:sOmyT7vCpN2cQ6Qw88JD8KuOoUGJ/GiS

Entry point:
B0, 89, 17, 89, 72, B6, 97, EF, 24, F0, 8E, AC, 5B, 4E, 19, D7, 19, 39, BE, 7D, 77, 5B, D2, A9, F6, 8D, CA, 83, F5, 2D, 8D, 36, 95, 08, 27, C2, D0, E7, 31, 7C, 52, E7, 86, 5E, CC, C4, E4, 6F, 41, F9, 3A, 99, C8, E2, 75, CD, EE, 69, 26, 66, D6, 40, 48, CF, 23, 6A, C4, FB, 44, 76, C0, 71, A4, 46, 49, 9D, 66, D3, 02, 0A, DB, AF, D8, D0, 7F, 45, A4, 3C, 81, 09, 53, D6, 7F, F4, 38, B7, 1A, 18, 75, 74, E7, 4D, 46, 90, 14, 54, 04, 52, 32, F9, E4, 5D, E0, 75, F1, 2A, 5E, 51, DD, 83, 26, EF, 2E, E0, 22, DE, B0, 67...
 
[+]

Entropy:
8.0000  (probably packed)

The file 63100.bubble_dock.bbd023.no.exe has been seen being distributed by the following URL.

http://cdn.bubbledock.us/setup/us/.../63100.Bubble_Dock.BBD023.no.exe

Scan 63100.bubble_dock.bbd023.no.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.