home

biddropbox.exe

Bulk Image Downloader

Antibody Software Limited

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘BID Drop Box’.
Publisher:
Antibody Software  (signed by Antibody Software Limited)

Product:
Bulk Image Downloader

Description:
BID Drop Box

Version:
1.0.0.1

MD5:
606e3e50da8ea65a56c387924408fc8e

SHA-1:
2d4d784476170300ace58a10dd65900fe273870e

SHA-256:
c711170088e07a8cf4240405000f55aadd8f3998363f94c50477f8eac1206f68

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:09:48 PM UTC  (today)

File size:
1.2 MB (1,207,608 bytes)

Product version:
1.0.0.1

Copyright:
Antibody Software

File type:
Executable application (Win32 EXE)

Language:
English (New Zealand)

Common path:
C:\Program Files\bulk image downloader\biddropbox.exe

Digital Signature
Signed by:
Antibody Software Limited

Authority:
The USERTRUST Network

Valid from:
12/2/2008 2:00:00 AM

Valid to:
12/3/2011 1:59:59 AM

Subject:
CN=Antibody Software Limited, O=Antibody Software Limited, STREET=14 Grabella Place, STREET=Papamoa Beach, L=Tauranga, S=Bay of Plenty, PostalCode=3118, C=NZ

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00C980B2B0EACCF754561DEFABD8F86C2B

File PE Metadata
Compilation timestamp:
8/16/2010 11:55:01 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:3YBl95GGw75Day6818XIGYel1Jowlnx0PWRtEymtnwu:3aiG60LcerJnnx0Mhmtnn

Entry address:
0xE3984

Entry point:
55, 8B, EC, 83, C4, F0, B8, 74, 13, 4E, 00, E8, 20, 37, F2, FF, 68, 0C, 3A, 4E, 00, 68, 1C, 3A, 4E, 00, E8, C1, 40, F2, FF, 85, C0, 74, 11, 6A, 00, 6A, 02, 68, D2, 08, 00, 00, 50, E8, A6, 43, F2, FF, EB, 4C, 68, 2C, 3A, 4E, 00, 6A, 00, 6A, 00, E8, 8E, 39, F2, FF, A1, 94, 99, 4E, 00, 8B, 00, E8, BA, 68, F8, FF, A1, 94, 99, 4E, 00, 8B, 00, 33, D2, E8, B8, 87, F8, FF, 8B, 0D, 90, 95, 4E, 00, A1, 94, 99, 4E, 00, 8B, 00, 8B, 15, 70, 05, 4E, 00, E8, AC, 68, F8, FF, A1, 94, 99, 4E, 00, 8B, 00, E8, D8, 69, F8, FF...
 
[+]

Entropy:
6.7337

Developed / compiled with:
Microsoft Visual C++

Code size:
905.5 KB (927,232 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BID Drop Box

Command:
"C:\Program Files\bulk image downloader\biddropbox.exe"


Scan biddropbox.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.