home

free cell.exe

Pretty Good Solitaire

Goodsol Development Inc.

The program is a setup application that uses the Inno Setup installer. This is installed with Pretty Good Solitaire version 13.2.0. The file has been seen being downloaded from www.bytesendclear.com and multiple other hosts.
Publisher:
Goodsol Development Inc.   (signed by Goodsol Development Inc.)

Product:
Pretty Good Solitaire

Description:
Pretty Good Solitaire Setup

MD5:
582c77b8fc5f296d7685fc13df021984

SHA-1:
bf2ccce76362ab0291a3176519c878b7e2041112

SHA-256:
45e935037fdb90f831e4e411e5bdd34ecef48fd929aac2c8e8e4e3e6638e6ab7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 8:26:20 PM UTC  (today)

File size:
8.2 MB (8,587,176 bytes)

Copyright:
Copyright © 1995-2010 Goodsol Development Inc.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\free cell.exe

Digital Signature
Signed by:
Goodsol Development Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
9/27/2009 8:00:00 PM

Valid to:
10/3/2010 7:59:59 PM

Subject:
CN=Goodsol Development Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Goodsol Development Inc., L=Springfield, S=Illinois, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
1958DAA9FF592D194D61356659506F7E

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:/bq9raQi+orw2Adlr70zAiIBCphlQ3wapKNGDLw4apC:/b0rTivjAdF72AiIBCpbZNGDMHpC

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9995

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file free cell.exe has been discovered within the following program.

Pretty Good Solitaire version 13.2.0  by Goodsol Development Inc.
Publisher's description - “Pretty Good Solitaire is a collection of 820 solitaire card games, from classic games like Klondike, FreeCell, and Spider, to original games found nowhere else. Pretty Good Solitaire contains a solitaire game for every mood.”
www.goodsol.com/pgs/index.html
9% remove it
 
Powered by Should I Remove It?

The file free cell.exe has been seen being distributed by the following 2 URLs.

http://www.bytesendclear.com/c?x=TID4vWCQ2fQB5dCbwQKcvPy8uDBQB1AcSJ6oREP1p5Y=&e=1&c=OyBB1yFsC69k0cIsT3El7eEB5ANUNbwHiJRzlXLtSh8N6gdpaFz9LIUSK3RJnF3TWi9ZS5X30GHOR886F d36Trh9JjtvIn4JVsj587bcnrx71sl/Jd4XFW/Wp4bw3lRgD0OGiA/hm0BPtTrk ISfUMt fUpFpOCzfIw2PGrsMk=&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/Karciane/.../gdsol.exe&downloadAs=Pretty Good Solitaire 12.3.0.exe

http://www.signtowntoday.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

Scan free cell.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.