home

gdsol.exe

Pretty Good Solitaire

Goodsol Development Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.goodsol.com.
Publisher:
Goodsol Development Inc.

Product:
Pretty Good Solitaire

Description:
Pretty Good Solitaire Setup

MD5:
d85238f9e8b71f108a50da7e0c16d6d4

SHA-1:
9c5d4cbb8f76e74f3d8a72cd0b6267d5ca6b90ff

SHA-256:
84fdbe53cdb2314b20de0490da4cb62da869333a4521bc026da79ff3c0a493a9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 6:51:14 AM UTC  (today)

File size:
17.1 MB (17,955,904 bytes)

Product version:
16.1.0

Copyright:
Copyright © 1995-2016 Goodsol Development Inc.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\gdsol.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:YNByotJSY/ZfHybp2c8ATro3FG+7cyBDW5rV0QHuNULRSqAj+vSO:WIotzhfepRZU3FQUDW5vCULRYyvL

Entry address:
0xA5F8

Entry point:
0F, AF, E8, 8A, E7, 86, E9, 4E, F6, C3, E9, F7, C5, A5, 14, E7, 8B, 89, CF, 48, FF, C2, 0F, AF, F3, F2, F6, C1, 77, 75, 0E, 8D, 2D, 0C, A6, BD, A0, 89, E8, F7, C0, B6, 6F, 00, 0F, E8, 00, 00, 00, 00, 5F, 8B, CE, 10, D4, 56, 2A, D3, F3, F3, F7, C6, 42, 31, B6, 04, C7, C5, 38, 82, 3F, 25, F7, C0, A5, 8B, 1C, FB, 08, E8, 77, 06, 81, E2, 82, 7B, DC, 30, 55, B4, D3, 59, C7, C0, 82, E9, 0F, 1E, 20, D4, 0F, BF, EB, 8A, DF, B6, 71, 12, DC, 78, 04, 84, E1, 8B, EF, 87, F2, 69, D1, 57, 2A, 46, 54, 8D, 35, 66, C5, 16...
 
[+]

Entropy:
7.9988  (probably packed)

Code size:
39.5 KB (40,448 bytes)

The file gdsol.exe has been seen being distributed by the following URL.

http://www.goodsol.com/.../gdsol.exe

Scan gdsol.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.