» gg.exe
Overview
Analysis
File Details
Programs (1)

gg.exe

Nowe Gadu-Gadu

Gadu-Gadu S.A.

This is installed with Nowe Gadu-Gadu.

File name:

gg.exe

Publisher:

GG Network S.A. (signed by Gadu-Gadu S.A.)

Product:

Nowe Gadu-Gadu

Version:

8,0,0,7705

MD5:

30b7bf0ff9d6f1ccaa88cb9151658af3

SHA-1:

bb8b9620beaca7f42d8641e3bd631604eb1d5e31

SHA-256:

bb637eab99002b28e4540330acc4b6a2f80be04a7c3791e7a705c52510aa973e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/14/2024 11:58:24 PM UTC (a few moments ago)

File size:

8.9 MB (9,302,632 bytes)

Product version:

8,0,0,7705

Original file name:

gg.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\nowe gadu-gadu\gg.exe

Digital Signature

Signed by:

Gadu-Gadu S.A.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

5/14/2008 2:00:00 AM

Valid to:

5/15/2010 1:59:59 AM

Subject:

CN=Gadu-Gadu S.A., O=Gadu-Gadu S.A., L=Warszawa, S=Mazowieckie, C=PL

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

6DFAFC081A91A7EB9FD67419DAE251CF

File PE Metadata

Compilation timestamp:

2/16/2009 3:06:01 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

98304:3O98LolKscOdbTCVEjyOC4grAkDqb1yg1glFzyq+dBUr+:wlK4koyN48AkDqb1/s

Entry address:

0x2CDCCE

Entry point:

E8, 31, 04, 00, 00, E9, 35, FD, FF, FF, FF, 25, B8, F5, 8D, 00, FF, 25, B0, F5, 8D, 00, 6A, 10, 68, A8, 9C, BF, 00, E8, 70, 01, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, 77, 01, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF, 75, 08, E8, A0, FB, FF, FF, C3, 55, 8B, EC, 81, EC... 
[+]

Code size:

4.9 MB (5,103,616 bytes)

The file gg.exe has been discovered within the following program.

Nowe Gadu-Gadu by GG Network S.A.

About 7% of users remove it

Scan gg.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.