home

Guiformat.exe

Guiformat

Product:
Guiformat

Version:
1.01

MD5:
daf2d9aa422c3d065c6f4e8823644944

SHA-1:
642a9141152db28264dee2b3644ae2abd901b34d

SHA-256:
1b73821db7b912ea18066ab9ab10877378315ce30d4f62c7607e39a3ba84cf0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 1:58:34 AM UTC  (today)

File size:
72 KB (73,728 bytes)

Product version:
1.01

Copyright:
Copyright © 2009 Ridgecrop Consultants Ltd

Original file name:
Guiformat.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\guiformat.exe

File PE Metadata
Compilation timestamp:
6/15/2009 10:12:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:I1/pCh2kNjqbi3YerMVWMoWOr8pT687M+HCcjazepxJRiB9z1AuT9cgqYpRHloq6:I/KQbNerbtZr8pTaVAoc4Zoq4xMI

Entry address:
0x4838

Entry point:
55, 8B, EC, 6A, FF, 68, 10, B2, 40, 00, 68, DC, 65, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 64, B0, 40, 00, 33, D2, 8A, D4, 89, 15, 50, EF, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 4C, EF, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 48, EF, 40, 00, C1, E8, 10, A3, 44, EF, 40, 00, 6A, 01, E8, 9E, 0E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 35, 18, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
5.3979

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
40 KB (40,960 bytes)

The file Guiformat.exe has been discovered within the following program.

Mac Blu-ray Player  by Macgo Inc.
Publisher's description - “Mac Blu-ray Player is not only the first universal media player for Mac & PC in the world, but also the best Blu-ray player for iPhone/iPad/iPod touch. It can not only play HD Blu-ray movies, but also support any formats of movie, video, audio, music and photo you have ever seen.”
www.macblurayplayer.com
12% remove it
 
Powered by Should I Remove It?

The file Guiformat.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_pl&type=PROGRAM&Expires=1486244940&Signature=D5RNpuR3xqH2YnuyE4b2QZPWJU3LPA20mQBtwKEhlryOpEh6O~Vtmu8XTmwgJ7sUfC6Qzx~G4VgeA2LitoM6mmp0EyAadC2yvzaKwMs4DMCMdP~ITm-pth8p45IcK0ybTQgTZyaQJIHp-VVIEbCrdb7iK4L5i~WBZDjwXUaDL3s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1484781987&Signature=DgFl6XMO-eSM55TpGasr9W42wUk~-MGm3eza48OUEOkU5exiWcRdl-fNI0o~MIQXBdhygKp-ZSenHYIMuYCT4Jk5dNvLsaw4Al1Gal0499aiL3VAJOkj1TPs6IQhQi7ZP5EK1kL7l04mubuExtXq0GRXTc5HXoFsYDTXHQCcZfQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1479532103&Signature=FN5FEnbQJJC-df4MTuzvVeenSQ2TE5adth4q4Q4XaHuRVTKNZ105WbB6uGPJ1HCo4kSE1hijcd-JaZUSxYCkrWZJSUEOXrhevDSI2krfltxXAJFjFTYLKNVnMe3hltOvLDsJsXjLsMFoFcZINGLUKSj2EfNLS7~2~e-0zD-j0sU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1476640768&Signature=WXF~TZPAIdA9iNn7UYMBsaSap2MQDTHEi6dIhdsyqjfpsPLJGXfvwDc45PKVzKP58KZuSxH9RTZvCuVdeKQ8iijTMsQCaeJoUfzLpKWiCMGpD648C6R2VXOdw2I2egkBjavE6KymUjyZzPoScoRZHTSpS9bxJFQt3kBumil39Ow_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://123.briian.com/forum.php?mod=attachment&aid=NzkyfDdlMTc0OGY0fDE0NTI1MjQ1ODV8MHwzNDU=

http://hdigital-eye.com/.../FAT32-Formatter.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1484726038&Signature=NntNP3u6mSSMTvwAwkjoV~ZGEshcSHl7jQQHGzGqFuXLJwf4XYwqtXefT7i~tp4W5Xgg~aI0JpFHYYxabUzeZIVRQVqtS2XMM-RFQX0gjauiEDHhyctCw4UQlRoyEXAUFyN~Ulzy8NY8-laQiZpKPxovzTRXc7OXXXogdRJp0sc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1487583613&Signature=iY5BuxcAJE3G-hWjsi-774xY6bup4D4DHy-UpF0djTRGlUoazXUXCAJW05hI6L97FBxAfHfMwMp1RSc0hP~-j0~nKsByNwexeUHdXg2p2RAmfKpGRHbpeinnaH0g7DImTemI0m0GrVyds2bm~UoOG5e0u04uF6zqpVK789HrwnA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1484040094&Signature=JYH3f-i4TdsowqF-IdmxIeHW5wRkDz6E3FR--oKwILF9TfzWDbxBG5c4BHrW9-hNFZdjHoVaOJZXLO5OU12qS4wHSCvhMrI7mTAaeVgrUyh4UoA5AmU80GAy990rUL-sGSwc4wwyz1hKhkAiFaC8L3SDMGSXQkVePyp3NQROUlM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_br&type=PROGRAM&Expires=1485593350&Signature=T0XmCUZAlb41owY69ktq~hfmmOqekwTcDP~7wOHGe6ctVIQvPUY9v-QmLjI1ygB8vK2ZFxKT932M1Lp-U-iUMN-o0M0d4JnCwj6cEuon-FsEPwWuWMdn19MJ1vvjXsVyQAjrv0rGra5EOmYnmHyEtiMZg0bKWbAdBqbJi5JyDPc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_br&type=PROGRAM&Expires=1477467285&Signature=IKSBF3GlbUNQJvobIEhaxI5~uBNRfAarinzVlmf71rir85la4Abgr1N0nxvj61LJ72IryEoNG24IoZ73nxg-7qXPw0LS1GfgLuZMxUS8ZKjiOLTMs3pXM6pIbfmoz6SvWqLOU4GBTVFDFeO1otnKpwFbHllEzQYBpXo7AzFMIBc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1480424772&Signature=Vu7GBfZJMSG6ZWFNC4QGO0KhRT8vmy~wQDEZggiCdq~AZIJSAAGrs1JAGWVVR5F0DMTYeK6zARzWuC8XInOehD0ajtT5lQL3YG7E3XxF3s2LUPtkFRCsadYOyEozlPFjG19vBV6a8oEkYwoLlAH52OjXmhf64UPsyF7Z3UF45x8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1476070764&Signature=QbEzvt63lWWI~LbXbIJqcwgbEtikhn77dfYvUJAqi9hN~rGpsWe5dN83-wE1khMu1tfIaVeizJ7TZIGP9d9ICLc5EzSHl59o93lKXlRoQ6toyDJwjX3H1j~JpdT0U3uye-JyFfIvuPTh1JvRgO6l-VP1N-~3JtwFBc1qjLwRtsM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_br&type=PROGRAM&Expires=1484380564&Signature=NCu-iVzbbAgrlFc7D08WhTz4-VFGfGh3Fh5priOed5x~f1lA5b19Qe6MzFKcGVd6Zsei8EAO4ScuSYA2-7RvgU~jYQc2El1rWe3jTWDnIK8BQ~UySlQc3V3NBciEjbBaz4L8eRAeM6u6H0x~DbVjuOKm17toT4Ruf7c5o-5lBuI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://fileshare1290.depositfiles.org/auth-148226597679d3dbb2e6d6afbdd8c6d2-132.255.94.234-69171197-150839443-guest/.../guiformat.exe

http://fileshare1290.depositfiles.org/auth-14874358023d1d6f4afb2bdc09bf0749-191.35.92.52-114470600-150839443-guest/.../guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_br&type=PROGRAM&Expires=1481610732&Signature=D0~8nnsedg49JSilaWKV-zxZ6RiXBlvlxu9b3KfRNdHl1qp2mlPLqVGU0G-zYMjZGyrso3Bi~iwF3JoaLZueLTEtt7LXGanaSv0yEyyKdTqa~exorvd-Ymoucm41KZ7rSqvTP8nJD2SpmOqqzWWje7SjveQobycMGCGJ9tN-3ck_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://www.ranchsignbundle.com/djIfMl5vylq42l3zwWG4MPDW1RtetTQs9PhCdjR1uF2C9gNXQhGliR Wz7TiuN7EBCAOsOQRQdwEWBPqBGKyB1p7Y6Yvpycq3E4NDCMfqiTz9bIT6kuWt39MBt3aWZSyHP0iq6wOsKPVGJTOoZHnU06dGmBIRK8UYLoJNJs5LPWKlhrDO5g=-Ow==

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1477954902&Signature=hKt0WtJcvuBMtYsK0dXo9XN1~LcbQf2fgKaKl3nJPZMd~U5qQgG4IGACMboX21dGOIku3Qn0zejMpLUtGho5FQ5203VV4hqtch0f4AutWnz05BD8zObezMjtzq5F1vubRmUksZllD1t0ih87RDkAKXrf5PP42mC5TMzXBIEYAXk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_br&type=PROGRAM&Expires=1481335683&Signature=NCZgQmYhpa~5Qv5ade1zT7JloqGmk5dR8FULVhLtkInGiCtEMP-bTt-AUZEKkz7BvlwimL4awZ0CkL1U~dlcMsPw~eIl5egS7eQnkriEKthXLj8R7H6OYa6H0Jqm6ku0G~8nrQqFGkgHlchmVDQpcm-4-v6Y-cY3lMsSu0PHyoQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_de&type=PROGRAM&Expires=1430609224&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Qj7gxQkY8Jh4Tzq9scKDyRze2wnDtoEEeS1fV7wMv3OZxBI7rix0YYWg574pCufdL0LWZoBlUI1ZhQgFRx9yPFDnzAHt5oATrxBaMyxVvprD-2lmINUbxjUVoZr1a7au9qD8LPOqbR9EOVuPq8CesoWpxcOKUevpgpCxWkKyeso_&filename=guiformat.exe

http://fileshare1290.depositfiles.org/auth-1475250050fce5d2425c2e72b0844497-179.35.147.94-2697554251-150839443-guest/.../guiformat.exe

http://download1758.mediafire.com/jme2yzrugp1g/.../guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1478492617&Signature=XLtL3ikKjoD98V7sK~ogUzUob0xw6yNdEwCuO7wynJowPgA2zg6sEBcfnJlsppYQJg0q2eJbtAL~ehPDw9-zavS0ONRkEM1Tc7FPQ9fCL22JyyT~eNXnaw~AFa3ik0CSciuMxHbO1CSd4FG4giXjB16sIHShO3gqdnARLENpquk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_en&type=PROGRAM&Expires=1477383840&Signature=VG0vmu8EdhHaodks4fWEsNe7sDvP~pw1QkEpUFpFClcks5~24RH6anBV2LaEDI1CBgQ~YSJzGPe-lF1BkkvmoII5wtmEUpHPxk4Qnco-lpm5KAEBXCgIl3D92vR4ClPhSPiDWCeZ4pGWCJnsOACkuel1WKDczLzG4TJC7lI7iIo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_br&type=PROGRAM&Expires=1476331820&Signature=bf-sYjm4ULnPfz3zSnn0Q~aD-b8Kpc0GHp-QJ-D7h29~4dAUgSJVGa6DalPBN5Tv~MHvv~CiJD~gW7aQwZkqMpiqVWTpzadwEV-YlSXYJcqH1uxG0qR1tVj5dBPmgmTKQ-8UVF3QOr87FLK-JA3HT1dwMRUL-Yz9Ggl2~e0LkJU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_br&type=PROGRAM&Expires=1481612564&Signature=c9gzcgHCVXq1kUVaR0ykLBVT9ZvOjxf5spTdFJgnyIi~pULGOA3oOH7Hgh0KGWbK6~7EpSrAqfVkXm798qISAuxxbxau~gapd6zCevB8AFgzh8lxzMW-gMdu9n4nNA2iUJnxT8x9ENY9O1zCdnIcn2pK0QUG1cX5-KST7RkGfio_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://123.briian.com/forum.php?mod=attachment&aid=NzkyfDhiNjA2NzRifDE0NzMxNTQyODZ8MHwzNDU=

http://gsf-cf.softonic.com/642/a91/.../file?SD_used=0&channel=WEB&fdh=no&id_file=324378&instance=softonic_br&type=PROGRAM&Expires=1468732430&Signature=UvB70CE23MEnLz10syCMIv~KuUXqNQX4GcUS6DeT39QIF5CVwIH8NHqAgcfYlIviU9DjZvyN9TmIK8RBdhntRh1gEyD59yb3aYg0xemNb-Y2wlk0hALIXvOmJmD-rRyCiBPpMg5ASp~oYwX847JZkh6DiL9dfFX1cwznezMY~Cg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=guiformat.exe

http://dc347.4shared.com/download/.../guiformat.exe

Latest 30 of 249 download URLs

Scan Guiformat.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.