home

gpg_bb.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1758.mediafire.com and multiple other hosts.
MD5:
369518d2466328eb3e3f1d3a8ab6799a

SHA-1:
7206deb790e1e29450cb89c7cad9046f54c9eb9e

SHA-256:
2b1b8d55147d384718738b2e67f3e4c7d0c2ae1fb1e639ddf5d506fb56bc8a60

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:37:17 PM UTC  (today)

File size:
581.5 KB (595,456 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\programs\gpg_bb.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:MLR43dLO7WoB7EjX7YTT56e+4ojWpEHm9ttq:a+3W/+3qQ1teEHEtq

Entry address:
0x6F3F4

Entry point:
55, 8B, EC, 83, C4, F0, B8, F4, F1, 46, 00, E8, 30, 68, F9, FF, A1, 24, 2A, 47, 00, 8B, 00, E8, C8, 6B, FE, FF, A1, 24, 2A, 47, 00, 8B, 00, 33, D2, E8, CA, 67, FE, FF, 8B, 0D, 0C, 2B, 47, 00, A1, 24, 2A, 47, 00, 8B, 00, 8B, 15, 3C, AE, 46, 00, E8, BA, 6B, FE, FF, A1, 24, 2A, 47, 00, 8B, 00, E8, 2E, 6C, FE, FF, E8, 15, 49, F9, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
441.5 KB (452,096 bytes)

The file gpg_bb.exe has been seen being distributed by the following 16 URLs.

http://download1758.mediafire.com/a0g7ds8974tg/.../GPG_BB.exe

https://mega.nz/persistent/.../bZlmTDgB

http://download1631.mediafire.com/2ws93q6duwig/.../GPG_BB.exe

http://download1758.mediafire.com/bom6o32dieyg/.../GPG_BB.exe

http://download19.mediafire.com/j6jstw8dpdyg/.../GPG_BB.exe

http://dc359.4shared.com/download/.../bb_calculadora.exe

http://dc476.4shared.com/download/.../bb_calculadora.exe

http://download19.mediafire.com/53bkylpperzg/.../GPG_BB.exe

https://mega.nz/persistent/.../jMdWEYaI

http://download1758.mediafire.com/qnuottjwqgeg/.../GPG_BB.exe

http://download1758.mediafire.com/sssbdmzdxxjg/.../GPG_BB.exe

https://mega.nz/temporary/.../jMdWEYaI

http://download1758.mediafire.com/q17v3mhi0ckg/.../GPG_BB.exe

https://mega.co.nz/temporary/.../bZlmTDgB

http://dc742.4shared.com/download/.../bb_calculadora.exe

http://dc159.4shared.com/download/.../bb_calculadora.exe

Scan gpg_bb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.