home

gvcsetup64_4.7.3.0403_en.exe

Windows Internet Explorer

SonicWALL Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.mysonicwall.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed by SonicWALL Inc.)

Product:
Windows® Internet Explorer

Description:
Win32 Cabinet Self-Extractor

Version:
9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)

MD5:
2bf1c2682fc0b56e87d32de94be4f857

SHA-1:
c7d2b0fa70bba9509413eac581d42ff622901990

SHA-256:
575bcdeacf96e06d182637637ff5cc9afe571d7e10ee1a1998902c53b69835a7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:00:28 PM UTC  (today)

File size:
14.3 MB (15,021,664 bytes)

Product version:
9.00.8112.16421

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE .MUI

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\work\sonicwall vpn client\gvcsetup64_4.7.3.0403_en.exe

Digital Signature
Signed by:
SonicWALL Inc.

Authority:
VeriSign, Inc.

Valid from:
7/27/2009 8:00:00 PM

Valid to:
7/27/2012 7:59:59 PM

Subject:
CN=SonicWALL Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SonicWALL Inc., L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
75FA0F2F2B7887AEFA70ED84AC4900F9

File PE Metadata
Compilation timestamp:
3/8/2011 7:46:37 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:Tm7qh9UUYLr1aiBwuFa03ketVDTYluRUP8OV0:6700Lx5BLFaCket+luSP8L

Entry address:
0x6B42

Entry point:
E8, 5D, 07, 00, 00, E9, 4D, FD, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, C4, C2, 00, 01, 75, 03, C2, 00, 00, E9, D9, 07, 00, 00, CC, CC, CC, CC, CC, FF, 25, 7C, 12, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, 78, 12, 00, 01, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, D0, 02, 00, 00, A1, C4, C2, 00, 01, 33, C5, 89, 45, FC, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC, FD, FF, FF, 66, 8C, 95, F8, FD, FF, FF, 66, 8C, 8D, EC, FD...
 
[+]

Entropy:
7.9979  (probably packed)

Code size:
43.5 KB (44,544 bytes)

The file gvcsetup64_4.7.3.0403_en.exe has been seen being distributed by the following 21 URLs.

https://www.mysonicwall.com/.../previousversions.aspx?CF=14&SG=7730&PG=DC&LC=EN

ftp://adsaftp.seccionamarilla.com/Infracomm/.../VPNw864bits.exe

https://onedrive.live.com/download.aspx?cid=4ECBE2965CA3E0AE&resid=4ECBE2965CA3E0AE!1035&canary=oIiGkQ9TL/.../ko4TtbEExEEasVOdJw8=6&ithint=.exe

https://smartsourcellc-my.sharepoint.com/personal/mhenson_smartsourcellc_com/.../GVCSetup64_4.7.3.0403_EN.exe

https://www.mysonicwall.com/.../previousversions.aspx?CF=14&SG=6358&PG=FD&LC=EN

http://readingprograms.org/IT/.../GVCSetup64.exe

https://secure.leapfile.com/fts/drop/custom/.../extPortal.do?CMD=4&oid=c8a0775f3ad25594013c7284681c3d45

http://software.sonicwall.com/?P=TVNXKjEvMjUvMjAxMyA0OjEyOjQzIFBNKmh0dHA6Ly9zb2Z0d2FyZS5zb25pY3dhbGwuY29tL0dsb2JhbFZQTkNsaWVudC9HVkNTZXR1cDY0XzQuNy4zLjA0MDNfRU4uZXhlKkRFT0RBVEEyKlNOV0w(

https://dl.dropboxusercontent.com/.../rshOETJr1esNcvUHaFucwHSLcXl96XnP0tu8QOT0dr3MsFCLX6KfVBOzwyD7Ahq5?dl=1

https://dl.dropboxusercontent.com/.../4yTVe7oRdz2lnSFVKck0MXAi3D4FG2f357q4tPOderoS1sh1Za8PAbgBjscMm13s?dl=1

https://www.dropbox.com/s/.../Instalador VPN_64.exe

http://software.sonicwall.com/?P=TVNXKjkvNi8yMDEzIDQ6NTY6MDYgQU0qaHR0cDovL3NvZnR3YXJlLnNvbmljd2FsbC5jb20vR2xvYmFsVlBOQ2xpZW50L0dWQ1NldHVwNjRfNC43LjMuMDQwM19FTi5leGUqNF8zMjAzODU3MipTTldM

https://dl.boxcloud.com/bc/4/.../jSNT_6qabojb6m_HcrSL4qujMIxnM4zUYPyEig9omF9Y_XlQkRggp9t0u8xE70rssvUD3izt6nbXEPH7ofmV_cpJ80lvsWXr6PUOPEfoeS5K7U6wm7iVNYp3kpUQNL_xEON9XzBdb5lFYRf5ULMvcVjlL6HoUgYlonocm-e1SQImPdc8t6J6Iw36TQZ4RD1i7Uu25Qy3u3cIBqF6oh7W1EqVLGb9fCJe9rsPQo9pUceBN1zqbg7XEIYXUxyH7BFQdXWPOxBHQaeGGdcLfiK-c9PpznRHMfzbyrwxE9_uLL8LEYFrWjA-7I80QsPgmTruYqtCbdtPofj87iXh3otKSE8qMXjHMqx8mSQIOr74d8GC_MpUkcdCUkVNg6YrLeTHqi0xPn8zl8iJoeBhTSuUy86jeaJUq1pRGyfB46LMmVm9EKqJjYpI67kwZdt0A1GxwlF10tEqk5vjXJkg9-OuPWNPgpPDw9nKwvMrFhZ-iia7-KE4HIw163MdWEVyvq1LAqw0U-VL6NgmvMTsEp5RG4-CmE5VPesoRl6SyxUgvvDtQkdwsvBR-Ai39Ect9ylWpkTpw3i_xxSm3oKSZ4evKqkXDD2NnyHaKBbFGLjYCvc8ixC6pnHmDkQETpkFX63r3tXjZxq8lq_nWCACRh6joWkhyusxvYaYo2dru8jP0hm5Vv99Rk56DuMMH3Bud1bR7EwB1NY6SHQ7Z1nYr3aGLD-Dr9DSmOfRCQ_hN7qYUySSR5JLVIJDZ1hMeG8TgAyu7_4kzbsbI3RD7dYrFnl-iSdP-SEr0Rk64w9H3PfnK0hdtBfEHI66EErjymb30v9oWHiQMzAhfMX8z_Jxa1je6pt3EqbKmsZFzG0-8aK1rJsE9roEIMdJGcfiymcULtwJsRMNhdoadZ5SjfSeAF_zMBcP9mnzkGUQU4KU720nlf

https://xactlycorp.app.box.com/index.php?rm=box_download_shared_file&shared_name=6c42zpkm0aimay0js0fh&file_id=f_18081227438

http://software.sonicwall.com/?P=TVNXKjEyLzgvMjAxMiAyOjU1OjU3IEFNKmh0dHA6Ly9zb2Z0d2FyZS5zb25pY3dhbGwuY29tL0dsb2JhbFZQTkNsaWVudC9HVkNTZXR1cDY0XzQuNy4zLjA0MDNfRU4uZXhlKk1JQ0hFNypTTldM

http://www.cpr.de/.../GVCSetup64_4.7.3.0403_EN.exe

http://southwestitsolutions.com/vpn.exe

https://intranet.pgt.mpt.gov.br/.../GVCSetup64.exe

https://www.mysonicwall.com/.../Auth.aspx?P=TVNXKjUvMjAvMjAxMyA2OjU3OjI1IFBNKmh0dHA6Ly9zb2Z0d2FyZS5zb25pY3dhbGwuY29tL0dsb2JhbFZQTkNsaWVudC9HVkNTZXR1cDY0XzQuNy4zLjA0MDNfRU4uZXhlKk1JS0VCRVdTKlNOV0w(

http://software.sonicwall.com/?P=TVNXKjUvMjAvMjAxMyA2OjU3OjI1IFBNKmh0dHA6Ly9zb2Z0d2FyZS5zb25pY3dhbGwuY29tL0dsb2JhbFZQTkNsaWVudC9HVkNTZXR1cDY0XzQuNy4zLjA0MDNfRU4uZXhlKk1JS0VCRVdTKlNOV0w(

http://help.mysonicwall.com/applications/.../GVCSetup64_4.7.3.0403_EN.exe

Scan gvcsetup64_4.7.3.0403_en.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.