home

vuzetogo_installer.exe

Ceedo Image Installer

Vuze Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Ceedo Technologies (2005) Ltd.  (signed by Vuze Inc.)

Product:
Ceedo Image Installer

Version:
1, 2, 0, 45

MD5:
edddbebca9c0bfa8043b7dfb5cef692e

SHA-1:
8518539b0e2055974869a06783d41e20a76728d0

SHA-256:
21e75907b991ed70d48e0631a9f8e48c6cac2b8532dc6a693d1742fe0ffa0c3e

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/16/2024 10:27:43 PM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Suspicious
23685

Zillya! Antivirus
Adware.BrowseFox.Win32.157388
2.0.0.2539

File size:
215.9 KB (221,120 bytes)

Product version:
1, 0, 0, 0

Copyright:
Copyright © 2008 Ceedo Technologies (2005) Ltd.

Original file name:
CeedoImageInstaller.exe

File type:
Executable application (Win32 EXE)

Language:
English

Common path:
C:\users\{user}\downloads\vuzetogo_installer.exe

Digital Signature
Signed by:
Vuze Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
9/9/2008 2:00:00 AM

Valid to:
9/10/2010 1:59:59 AM

Subject:
CN=Vuze Inc., OU=Vuze, O=Vuze Inc., L=Redwood City, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
28226C88B085FFF18FF1981B84A844C0

File PE Metadata
Compilation timestamp:
4/1/2009 5:59:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:lBHpnJZfGZ7v6E3oCCIoFfgbuEBpHp9uDo4F+3YYlbeW2i22r9Q2LCz4RX1qG6QE:lBdGJyMRCLAzHHcXk9sW2pP2+iMCF

Entry address:
0x92B30

Entry point:
60, BE, 00, 50, 46, 00, 8D, BE, 00, C0, F9, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
184 KB (188,416 bytes)

The file vuzetogo_installer.exe has been seen being distributed by the following 9 URLs.

http://gsf-cf.softonic.com/851/853/.../file?SD_used=0&channel=WEB&fdh=no&id_file=82170&instance=softonic_es&type=PROGRAM&Expires=1466050515&Signature=FfSfvjtQW0gM6f07bueiQfSt~YDayU59gj3ziF-~j9cTsJtAd~2Ce89IOnvzHyV-AOPlVwMoU7smDIbmcJeXYCeOVCX4yzoZ8ka0RuZHBNni~mUlX8SQ4mV5dsMxx-djcfqzdK6F4oV0cqiPumr8n3KaKQOu8Z4t4NFeia5a4Iw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VuzeToGo_Installer.exe

http://gsf-cf.softonic.com/851/853/.../file?SD_used=0&channel=WEB&fdh=no&id_file=82170&instance=softonic_es&type=PROGRAM&Expires=1454978855&Signature=C3wCyO36RP8g7CqtatiscTTFP4qzGk57AGDHIu3LL-chKF5aA1-nVim4p-fGzbdzmtA9cl660imM95aZe0taayCxugpb~OyY90nmznB4aC0E1F6wJtjYvKFWxxUn4QecLapl88xU4bvkx9jF4vT~DwEMEaNernHRW9jFkBW1AsU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VuzeToGo_Installer.exe

http://gsf-cf.softonic.com/851/853/.../file?SD_used=0&channel=WEB&fdh=no&id_file=82170&instance=softonic_es&type=PROGRAM&Expires=1461467687&Signature=Dd5GR8ag45OznbwDlw57tv0SX1R3rQAAJgJ9gslSCOQXmc7wO-1MYLYN7agXX01na2cAAPllyfhs4ra1n9MhxeF3whCubND0zKhRO7F3yDGMexcL6K44wBxkDykCDLu1ygxRGvN3~d~rZ3YlpxZPw9~vgUjbWH1i4nRHfj3hmb0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VuzeToGo_Installer.exe

http://gsf-cf.softonic.com/851/853/.../file?SD_used=0&channel=WEB&fdh=no&id_file=82170&instance=softonic_es&type=PROGRAM&Expires=1453717273&Signature=Hsi28Zttinlb0OWpaJjw0XQGdFvS9vdh0cJ2kAka0nmlpdjPWe9PKl8cYYWcLOzX7ei61trdgcvom-QfAQuWDJIax7pOKxUmxj3wI7KeI107gkVL~yI5cuy3CbtiJUeToXs~IrONVLQJW0IrdnfkpjtEmJI2faz81IdnElzoNAY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VuzeToGo_Installer.exe

http://gsf-cf.softonic.com/851/853/.../file?SD_used=0&channel=WEB&fdh=no&id_file=82170&instance=softonic_es&type=PROGRAM&Expires=1455682439&Signature=We8BZw5NN7a4Z~mldMMgIW29OPQ6oXNepqUbaSEdaAnwRqeNI3TxUSmnPxh1l~V7IxsYkr1eWlAr3WkQ9lL3DfCJcVi1LhB2ONb8l3Uq3EAj8SRUgQavdawpgxfPoXRyoWAdQfUIBNQbwcmE7tEsl4YfRSnpsqa8NB7njbKOH08_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VuzeToGo_Installer.exe

http://gsf-cf.softonic.com/851/853/.../file?SD_used=0&channel=WEB&fdh=no&id_file=82170&instance=softonic_es&type=PROGRAM&Expires=1455862247&Signature=RV79ZAMEbOIZ3Dm9mbCG-FFoSjfxNteIPxWSFw9aZkT8EECec93QlivbW43Own5dt~LZyr3tEk3bX7RrAnZJwbMpqMT5l3z955yrYQ1OybxWMRIbsA~bf7~yU~BM2b7BMJigiupgmsZEcgVw-9EZRtll1W0xTXirMl-6BAv4Ddw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VuzeToGo_Installer.exe

http://gsf-cf.softonic.com/851/853/.../file?SD_used=0&channel=WEB&fdh=no&id_file=82170&instance=softonic_es&type=PROGRAM&Expires=1456481127&Signature=Is29VddF2RQ4jsp5qWjJTLWOmn1VSeVYL8-bLvDXDhu5ZASa-zrhBaK8m2TsEF8YgoWHcJl-Vh0snyH2hl8x2DLYdBbsKBlCp1aADIivrgyAI5TmlZOeo1xPw9BksjBbHCevBaLKdOxua0elDnnrUCtbtYsxUkWYLyxWC-bnhpg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VuzeToGo_Installer.exe

http://gsf-cf.softonic.com/851/853/.../file?SD_used=0&channel=WEB&fdh=no&id_file=82170&instance=softonic_es&type=PROGRAM&Expires=1453776670&Signature=KecCT50tkxs2ciW1a4rByaluL3l2nz-sOk5r~nP6TqnAAPxvZSDlauMZFycnARfSOnRQ91cIOIKjjRmydBpsgwK0W-6pMlTwHdpoi~Dm9UwYTn~2GJqHa~olnXIX1oeEC~JUiXe~QPk1f30R7KPfnf6ChD0244NKL6zl8-~22Bs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VuzeToGo_Installer.exe

http://gsf-cf.softonic.com/851/853/.../file?SD_used=0&channel=WEB&fdh=no&id_file=82170&instance=softonic_es&type=PROGRAM&Expires=1453106351&Signature=JlC2f74CiwYH3U7hdp-MtQnnnfCfVLjmjuxDTUHibTk30EUmFogOuFME-U~Kck85naMQWWQ1EPHLiuF2DPaLWmo~dnI-iv9AIjtL5UwkY-AnD5Sbsz~sTNqDt3ObDZioDSAjLu-O0KWwWxppv01zpD8rVTEeZt6NiVIsVlasN3M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VuzeToGo_Installer.exe

Scan vuzetogo_installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.