I’ve downloaded Gpg4Win 4.0.3 from https://www.gpg4win.org/thanks-for-download.html and submitted the exe to both virustotal.com and hybrid-analysis.com. Both show some form of malware. In Virustotal, only Comodo shows malware, but in hybrid-analysis the crowdstrike falcon sandbox shows activity as well. You might want to do an analysis of your upstream tools to ensure that you aren’t infected yourselves. For now, we won’t be able to use your tools until you’re shown as clean. Thank you.
Hello Benjamin Weiss,
thank you for contacting us in this case. Other people made the same experience so we created a page in the wiki (https://wiki.gnupg.org/Gpg4win/AntiVirusSoftware) where you find more information about this topic.
The most important aspect is: If you check the integrity of Gpg4win you are on the safe side (and you won’t install malware).