home

gboxapp.exe

DownloaderFF

WEB PICK INTERNET HOLDINGS LTD

Publisher:
WEB PICK INTERNET HOLDINGS LTD  (signed and verified)

Product:
DownloaderFF

Version:
1.0.0.0

MD5:
5e81562b082cdb608715ce258d2ba9f5

SHA-1:
27d908e56b4a87b16f8a15596e9f7b232d4f35eb

SHA-256:
41c48c84b6c0fc329cdac8016aaecf0afcf6739623f4e764af01e078a0b4da8f

Scanner detections:
4 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 9:46:53 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2017.0.2725

Dr.Web
Trojan.WebPick.7479
9.0.1.0154

G Data
Win32.Adware.WebPick
16.6.25

McAfee
Artemis!5E81562B082C
5600.6381

File size:
12.3 KB (12,640 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
DownloaderFF.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\gboxapp.exe

Digital Signature
Signed by:
WEB PICK INTERNET HOLDINGS LTD

Authority:
COMODO CA Limited

Valid from:
6/3/2013 9:00:00 PM

Valid to:
6/3/2016 8:59:59 PM

Subject:
CN=WEB PICK INTERNET HOLDINGS LTD, O=WEB PICK INTERNET HOLDINGS LTD, STREET=Harad 7, L=Tel Aviv, S=Israel, PostalCode=6971030, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0645D608C556BBEFDF7AD9CB86990822

File PE Metadata
Compilation timestamp:
8/13/2015 5:40:24 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:6s/y6deIa+aQcbedhaNhS0GEKWjRPkofHix8k38LWM1P1Kg2McJmK:6EHdeaaQcbUhch1RKWjRdCxV8dch

Entry address:
0x349E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
5.5 KB (5,632 bytes)

Scan gboxapp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.