gunsetup.exe

Glary Undelete

Glarysoft Ltd

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
GlarySoft.com   (signed by Glarysoft Ltd)

Product:
Glary Undelete

Description:
Glary Undelete Setup

Version:
1.6.0.262

MD5:
247c029bad71e361880fbca4a99be42f

SHA-1:
94d37236da70e95883d3e0adbf5c1461638d5328

SHA-256:
d654e19dc93092cf0b76e0845a567d1f9dae6f00458c0ffc0582300df10fdcfd

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/27/2024 4:13:10 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
8.9518

File size:
3.2 MB (3,354,016 bytes)

Product version:
1.6.0.262

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
11/2/2009 9:00:00 AM

Valid to:
11/2/2012 8:59:59 AM

Subject:
CN=Glarysoft Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Glarysoft Ltd, L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1CF345C1556D7C9E0AADE89256F4797D

File PE Metadata
Compilation timestamp:
9/23/2009 8:06:57 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:zRCNRwZm1u9g0HAbz9SHbGTRInhMd081MqO6/B0:wNRwL20H+QHGInhWLJ0

Entry address:
0x163C4

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, A4, 52, 41, 00, E8, F0, 02, FF, FF, 33, C0, 55, 68, 89, 6A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 45, 6A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 18, AB, 41, 00, E8, F6, EC, FF, FF, E8, 01, E8, FF, FF, 8D, 55, EC, 33, C0, E8, 83, 86, FF, FF, 8B, 55, EC, B8, 74, D6, 41, 00, E8, BE, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 74, D6, 41, 00, B2, 01...
 
[+]

Entropy:
7.9854

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

The file gunsetup.exe has been seen being distributed by the following 21 URLs.

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_it&type=PROGRAM&Expires=1433373733&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=crfaP6YIVKPJm3ZzZt7nHsDnskF2cvNltuT6YpNwF50-WMn67URDGKwdbDXDVKeP5Jp50OEzpzqpxLfAGdE1uP8Es2OV8FOZ83F3UY3hDKXYBmTg2F4-6B3ciw~Eo4IdAkIRjy1d95F9AL~AF0Xvq4HwkaMwGvlMEokuEnOthXg_&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1484223873&Signature=D6hcyVNa2CNrJTbqpypXvKI6DEHlrBM6ARhb8NuJeRdfu012HSPPedha74jbsTh~Xfa~rUtxgdQ1KULvh4m62o0bmIlKplP7McbNnuTzI7unFtXLAyJIrXDWO0dWFPSKX4bOUNdRjcjUPaVf3lltP4QIyN7lvgOj61x-0p2Ev~Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1477802321&Signature=Qaj5WhvNt6cgyfjIYaCzFDaQ0Y5XwTHcGMYaGr6MnKuZXW6QPTN7z0CRUnoXtbNZQrM8u8p0LKT9eBR7efm1bVh98KDeGhLS4YhY4jpE-soqZsNXGjORGd~nZxhJIMwUtXSJEAp3jmU-zzYtGxh6D31NlffORxrc8bhw2KxXew8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1476146989&Signature=BMUhUt347tyEIDkrwYdELQXEPjMXNAZZyBVN~Io01i81UlTFB5T7AhDHtpIhGHCnMW5eVUeecQ0WhgzlTw9zDVL6orRSIIQatqP7uTzxK-9J0vZPgcq2yBCTbpE-4x~YIVG-xZNkabCEidGZce52EayR-xhZPpoh~H96xo2PC3U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1478052163&Signature=VHCClKAsB0ikFjNIM1e3snd2mTUlrXr1uJsjeUbRwEBp-fabUKRS56gGx5jgC6YzrFWvLMjOFKWX9ts3n77OWaMRI2twoxVUxxXJlA4CiEkVEUWofjPIv565jN4TcImBaR1beyPVeR~9Gs3LrzZapXBBGDDxTdWroiYl0g6WQIE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1478643465&Signature=hEGUBfedUsD9W7uZO~dcLBfRhbkzHFOq0KX0JNfSbz4c4zM4LcH2hcLeketW1GdIbT61p8pNA4Mjt8O4j0p4eNcqk48WU-6BkQPp189n7~vSGn~1qY2FL6m6XpfqK8UCgIzJblh0rsIrVr6uHlk4cQ8olMjcw6T~Ok5D9F4BfEo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1429151693&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MeZKc11YtdN~mfAiTT-5Y4~oty2R~ujJSyZNxPWPNZiBCVWee2iOdfJNwNPPK-ILre09hhPvkLD4xve7F1ZpfUyrXC3vCoKhn8uoLwfL8~bhq-V1ciJ8fkgMbeu449K7Z7vgaRJ~uR81fcx0w5ZZ77FUgv8CVEGX90Lqw1xLJI8_&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1470716899&Signature=Xenfi1d-sgmbu1rKrgiDtn3HV~It74iZoQ0n0GD6jStyBHsxBiGn1OkzXOEeW2G48c-Q0j7Kg~HzgRY2DrRS3PxcPL6sLJautCvCccW1CTfAoEZiN8pLk6YDivVbNOy38I~dzsfAsqf9O1CjE3Du8cpyo0y3PF7YsjND5NmDzkA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1476693382&Signature=ZxKwVPQVBoUi7rCRkhlol853UD4AnNdsh4IuceqjBXbiaEjsn7ahz0EPoTko0aNI39Ti2PsKalp2lsN7RMIYgqyepJKnHoNIQBrIJxeW6fzyKZyqRlD8Tn-xBbJHWnTnb1wSl~xIR6LlENRRE2r0Dqu9ZVlBFNBtd92psYbRd0A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1478017980&Signature=K71uaK0bozNk-BTjP2wGjrzxbFmJ3HY6gV2Sq0AIztJcVcQRouGn2iaOjrr7rHbfpnEXSh6Yo-XeI4OnPuwDyVi4M6auS20RPu2JVAl4b2SeWRbngjcXT0RJo06EzJVfMRoyofXFR7tiNVqzT8C0MqX2b-0UbsN8cGYVmJ5ner8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1476781096&Signature=dL7-9-gV5xpavzQlpDqFWrWsl4X7izgNbr3CK7inBl2mZ7Y4YvPS2WKDKzYbW3-XPoc39k3w3FEaPk7OVX40SoEZFIw5CuK125mjmrkEP98lm9ERfmzgVyzlkrOZJ9XsLyL4PyY6vpikQfmPlhr4Q5rf~Q7lngBK3sRlfBRlT18_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_fr&type=PROGRAM&Expires=1436355707&Signature=NPbo~UwmB62bOAc8~HcZGWFIk2kfL~T1uaUQibGQeU2H71ZmbxzUjaXvw96rTkOzKnwRV8AWTcHL81Nh6Jtnh3IJA1s~huhxK36Pt5vF98KURqK8BUib4Zw~6X6Jg7-2k-DVzWlfM~4SWdzONqYQvCq9y~qFZQ97l8HUg~JsKDE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1463556815&Signature=KGaqiKcLnW-E-v~lMB-608EFWmyZaG~Y1u2AEQkI6OAxDe403LNIA0HSIVdKvQ-Jv-mDBR3eJFQ3f1b~lJPLReSaH53pMl8Z8GDZpAtgruqvhoswqc76dDVlEf-thCFMwZCVk10GE-JTWcI6yaxj-p1wc8uUo-M1fFbGnHYlkeY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1433058425&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=PVrbHGljlp-OsSZrV58zs5z2npAFdQvJVbvOzq31WV9tnQqDz25gTIX1qyG9RBMwh6vdpOGhW88bIL1kkyCM1bqnItz6Lv~-nbQus1zc47Ao27KT54BuyGwob6MjgkcUbTyz3qs0BvGsfANPoF3wEhGd8TNpQdvwyvgoe~~PFzo_&filename=gunsetup.exe

http://gsf-cf.softonic.com/94d/372/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70493&instance=softonic_es&type=PROGRAM&Expires=1467790099&Signature=hvJydbGWWbTcgcpyydcLAypBMz9Ak1UnaOoP4TGdtzvP8GwLQ11UJhgvWX2A3nngjBf-1Trtv4kgXygwWPBrkYHWxZNOC84UmLQXbACycOerHiBPqM1CeJv1NbhEow7Rv-QPAOKvIJ0DEqgN755S0aHkikC7ZzGNKSOFzOyaTrI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gunsetup.exe

Scan gunsetup.exe - Powered by Reason Core Security