home

vidlogo.exe

Intelus, OOO

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
GeoVid   (signed by Intelus, OOO)

Description:
VidLogo Setup

MD5:
12b63dce1197a54d33ee1f44b92f017e

SHA-1:
a21b21880aaf07ee813007703fd403e0188a3b6f

SHA-256:
7cdc76c5e9b705acd7fd9e209898ce65018ddc3de4a353a6cb2828744772c4d0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:07:00 PM UTC  (today)

File size:
15.4 MB (16,149,752 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vidlogo.exe

Digital Signature
Signed by:
Intelus, OOO

Authority:
VeriSign, Inc.

Valid from:
6/4/2007 7:00:00 PM

Valid to:
6/4/2008 6:59:59 PM

Subject:
CN="Intelus, OOO", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Intelus, OOO", L=St.Petersburg, S=St.Petersburg, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7603BB2C40BAAA3A4C52FAECB1DB4B39

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:jEWJNc+Oe9X3vZpX77yEYtPPvkyM+FpAlE3qVQfMo:jxJN0uBRdYPrjF+lteMo

Entry address:
0x998C

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 3A, 97, FF, FF, E8, 41, A9, FF, FF, E8, 6C, CB, FF, FF, E8, B3, CB, FF, FF, E8, 12, F3, FF, FF, E8, 79, F4, FF, FF, 33, C0, 55, 68, 32, A0, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, FB, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 06, FA, FF, FF, 8D, 55, F0, 33, C0, E8, B0, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, EB, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9999

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file vidlogo.exe has been seen being distributed by the following 10 URLs.

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1480234403&Signature=YsJE6PBBf8NEd21B1CobhP0AQOrL~vCJ46tXTGRB2nApFH9G4-DHHx4ZzARty67nIc2n2itq-bdrrLEI3mc19gmPd57OK-Rd7MXjeQKqkS8EpJeCZDx1b47SnTYCqaVWCmWtfQ3fK-VCUCPhyHAvFe6TbZABwM-ZJleL95c7oQo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1476015004&Signature=SVLbpJcDY5fN~jGwQBR3Rng0aQjhp4fAUzCvAKDw~zHwUlsm7bD-JX3bCWWYikMCo6g23M~GgU~9KzJZz8pziP59uOP~5tUdruMBptga1SE1HMNg8MJPkuPBRzJD1YepFy5Oyn~DTfs-YqfXoA6ECJbsWEGtDuDrGlT~HpNFWFw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1460971162&Signature=QznJ7pexZFIg2pnPdX1nzkO4zIT0nYFB4Jp789WHq6oGWecIwabRBhFCkmEKY8stnYfT7QGh-iGg9yhR4BkV33OoI8EyhLDp1ksnQKFYiCPvjGw4bj40gDt~zfEYTE51qWrGWcoZf9jWg6eWeVoRCJ3dhbiXIv-O6qwNWLDHEzI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1477793951&Signature=TsTDlvVz-J~8x~aielQJU9UuR22~3wAvrYMBP3jIEczSqVV6mSia8VwePzQs9-tkLY6qrYE9S65A8cVSlx~hoVe~V6nENvs~jlK0sx7fk04iHrgm3FCNWcHJUt4LbjWQKnpVoU1ItqxJBx3jHmnaAkpaT3WQycu3ogE9xvB3J0M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1471620083&Signature=QwrOwrB1PiSCKoIBX4aKhAzRfW1WDt5whu~-HJDMruE1DLg8UJKIIJV5m5TehQX52zc6nzl5rzbcCi3XeM6Xwod5fpJ-ACxYru~bGi-d4vZ1Blbu8OCbgYEVBG7AXw~fAUvKy00cyywGPt8zrlH5U8czQQ~0Q57DcGEXLxtkUAU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1472558891&Signature=NWPfGSvUub0Pl6kRPyqjgirsWskRShu3TfKC4f6imwdQY5tBXC1ZbIFiDCNqqAU02GSW6HMS9l8GWnis31K2pXDM5PQQuKt51W-Zfgp6fKcRNFN-3WANypGWQVk6w2nQwItNT1F-fCFJ0zqJ~mLHuGnaTo7b4tgtZcUtVPHOQ10_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1465281622&Signature=ThJb2NXXGpysTpdhtBSJcxoS8NPBJdON3-cRXgfVKzKKCiKwPzZ8v6r9nhEcu2TvkaHZ8xVpi6U0WiGAlvyLRccSrKwsZYpvcwPToJTJ8yp8zlwkcv4cna-l8qQPvbI~p44PoxIryXtLFWG8MQ2lQ7JFpgpgrf7Js0PIgm7Fapg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1463301968&Signature=btXHA-esRJ2FzobIBUcwhheGOMnF1vOY1d--1Put59ok9XSTbiZgpNhF55-fIZIzZnV6DTh0x9M1YSi7tjUkbEoccCVvurKya5h3sQUfVb2-8UdonWVWRU0etrwK6r2fg6XpY3W6v-KBMxpd4UQZHJBzZK6owmFbMzSh~FesP9w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1455301150&Signature=BCP8qWnkkkC4vkCMH3QhC7MgnA2GgoofXYKx-tUsbRUv22-zvBrrYCLFmyi35M3goZZ37sMzGxUXGzvRKOzlm0erIzvPvWGgWlAIzX3Z21~e2ZGAdNs7RLJfs0oAGnNl1XEvWesZ-bZQDgOdWVhv14xjN84yajduvieXP7gFVnw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

http://gsf-cf.softonic.com/a21/b21/.../file?SD_used=0&channel=WEB&fdh=no&id_file=40720&instance=softonic_es&type=PROGRAM&Expires=1452436483&Signature=CNFLc2kdRo1ZVnBmYZSj32zmrvNw2WJxsVLF3yH0xJZQAW4Fn2pIPEs~Q6Nu2AxVJdbIMuGMlivvNrl321iWKWEL1J3ZHn5r4WXdZv7qcfc66mQbYq1RyZLVX3bxg0CUaesZjqOZvGouSSkba3ALc5D1rABkaQolXspmNVzgjfk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidlogo.exe

Scan vidlogo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.