home

va32.exe

Speed-Bit LTD

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
SpeedBit Ltd.  (signed by Speed-Bit LTD)

Description:
SpeedBit Video Accelerator

Version:
3226(build_2079)

MD5:
861d70159fae010ec66c2981febf540e

SHA-1:
eaec076d6c06aeb774c8a2f1b253e83cd8bd1819

SHA-256:
3d6ef51aef3524d1e46f6c025420766be39b6a7d8dc67ef42a599d81d50bd504

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/27/2024 1:39:02 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
8.9554

File size:
7.8 MB (8,193,224 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

Digital Signature
Signed by:
Speed-Bit LTD

Authority:
Thawte, Inc.

Valid from:
8/19/2010 12:00:00 AM

Valid to:
9/3/2012 11:59:59 PM

Subject:
CN=Speed-Bit LTD, OU=SECURE APPLICATION DEVELOPMENT, O=Speed-Bit LTD, L=Haifa, S=North, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0C58AA8EA812E208E94134CC1B7556FD

File PE Metadata
Compilation timestamp:
4/8/1999 8:24:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:dO9YJqBgn7OkT4dmmJ27XtI8hPg0OLp7hCBaSJKOE2EwIn3R:47yySmJ27XtI8w9AaSJKOPxInB

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 78, 05, 00, 00, 53, 56, BE, 04, 01, 00, 00, 57, 8D, 85, 94, FD, FF, FF, 56, 33, DB, 50, 53, FF, 15, 34, 20, 40, 00, 8D, 85, 94, FD, FF, FF, 56, 50, 8D, 85, 94, FD, FF, FF, 50, FF, 15, 30, 20, 40, 00, 8B, 3D, 2C, 20, 40, 00, 53, 53, 6A, 03, 53, 6A, 01, 8D, 85, 94, FD, FF, FF, 68, 00, 00, 00, 80, 50, FF, D7, 83, F8, FF, 89, 45, FC, 0F, 84, 7B, 01, 00, 00, 8D, 85, 90, FC, FF, FF, 50, 56, FF, 15, 28, 20, 40, 00, 8D, 85, 98, FE, FF, FF, 50, 53, 8D, 85, 90, FC, FF, FF, 68, 10, 30, 40, 00, 50...
 
[+]

Packer / compiler:
Wise Installer Stub

Code size:
512 Bytes (512 bytes)

The file va32.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1484137251&Signature=H57EKuCLPNgXgkXTrvudWMWJDBVEUOKJ95chMGFmhmH8c83kKc3jSAgd-FnNius10LGUnCxQQwYOAfOsOv4EUw~85olFAq8HSIlTnpJs2VB4fNOh3gY5rLfSx3tnZk1vwPHCjQ5WpehWzUFbpXp6OV4OfoGIM8swtMoiGnJzarE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1484801911&Signature=OYA5gGZk-W~BqNDLlaeVxGtFqMoTtmWwh9PUY6SMFkkI5S6K3Meehw2BXX7SCpYvz~Q5AxkOAXH~-4Zn6x~iirJeYO7GJhqd96WTWSEN~lpkNxiy~hjJoptfbNzs8cxfhr~q68QvByxKe7aBZ794f5Fgm7dzPkOyVQXzyloIEPg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1486896473&Signature=JSFUHj7izu7qBb3fhtR271U1YdcH~UPtdAqSgcbfzgdi0BCDIklS845fB0SX6rIsZJLpnMTmX8tnrO1manT-qGKsQvsY1qBmmQM--eSB8cvpwZtcurkpIb9W5JX2l3pIQG4UfqMOSTTYziH6le1yGpbK1RLeLbf0x61WPn4TMVQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1471936890&Signature=bMBnQZzZysSI7FEtCqKx7MUs3flVVt8Ljo~ivFbsa0zVcxPJhCts5OQT0MIyB717BlR7e~TazccMAMYPynWn5eb~R1NQPPxYBsjSc9Yj58VoDv5XAERZthscnJFJY3C3Hkrvrl0~so121wYe6jrjJQ0ZOhKnpKDcshp6WyZAreE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1456333169&Signature=PfGxopRIEtJdOnoLoP5ctKi0-ugNopFSZ5iND1Uxgwc2mkxn2IttSJpCnTnxt8rP~tqvkQ3V3eZ5sc4V7mD~QYGVVq0mPfIcxlF0B18IuScvE9i~Qr-5jmInlJgxDpE4xes2ECSD~-xv2blSWbsbHj51TU6CP0oaO0UMCQrzIOc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1473990445&Signature=IGccxNF~vvGhepiofXKxvle2knDPqhxw1QejpMiBropOaptZq-iUGjyIi-FcOVT8VkFaswr4wyP2fuAxyBUgpt1EGR1DY0jjL30kamuuIQNE5HDGkzM26bIsPw7dEGrPnLuXCFrq9XOm-ibqgzs9kiIDZ3tYRwzNP92ANVO4Hb4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1478588821&Signature=FA1yjEYyifbvgjA18mJoOAf9KrNngRL2Wrt7pMSbS7nEuxK5p2qNmroBuxmpgktplyhiG5edFdzdriZls8odJVHrfeKFKVA0CNjHDO3OwBc15ISwrVsD-OnnWlV8oIyFbM9Y4DedUgK1uVh7Mizk4mEbjctauodDlLhaYLVZkWU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1477971737&Signature=VMG92ioCHtgtThjae0~5H3tj8A7PS6sdY8ye4dHN975~ULyq~1BMav~tc60~hvDHYclE0pXslCOD9CJ3f3L9NZ8YP6PJNCwdUVrdvcKlV-E99AeUg-ttJWFACfWRCnhWZKjKtK-pi8JLtYFncDpBSHw2zouFPry3I4gGcClGnh8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1462063485&Signature=DJAcrZaFHIJkxg2yQLe60DOnWzVtjxy5xFcWvV8RZwsEWMDfNuMP8ijC6wY3GIxubR5nDubM9tYpF8uvIvN8nHyEt1pFKxHVx8kfIQjwiSKCiqa2xDaxKuzZEfMk-wckJjY1fvnSWpSqE~5RA~On55Us3X35hJARuzfE7c7DHHk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1429770753&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=WU61cSVeI5Xq6nWZN9rcgthtg4LLjntQ0jamVjcgbfUSM8ltpJWRXm~YdXcu3wl2aPwCjTrtpPcfx~IBFyy3am77ED2yW94VTBko6z4d4ADjc7BVDelQELKF4jO0DY5~QdGBLSW0IgSjnxxr8QA0PHIHsxYs6WTfHyehDYSVWgc_&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1449649541&Signature=HzwavVgPfELBSwW8~qYyXJ7Uz8jWNFyaTZQx5mzLeGU84Xa9AAoA3IRUKQe0jmCUPywhiXxSboe44X4z6P~Xu9YHc9Yt9YQTWpWJMYjY~~8LsisuHvlf6-Qo-l7ctfxCTHeVOuDEnDV5d0oa6lXTZtBT55SvxCCJb1BIUohAnO4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1477435316&Signature=EUt4k7jstJJx3vc92c5RNkxzmz~39yi71XVoVMpo6pFHAg06Q9NW6LpPgCdwhg0G6gwNhHqgh7ERNjFLJEw-3HBY8JdahmyLoRuepkeKdvdrsTPSJUTIbU3aFfucBEmgDPZDUa9hXZMRPmc114odnJuZ0M8xsHZr2R55d2L6p1o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1481456367&Signature=PxgybHTABH68cV-~wQaMGyw8rR97rzOUx~Lm3IoUSkc9puDF~Ag~gngmW4p5tQJ6~g68kXgRbQSdxbL3W4s1vBj~ctsRUuTTMgZDKleYb~cIzJmnqDRY2tuyjgwwOWYNGW9R-AQIKhPoIZMq-fdN~ouQ9wcjo1NFbmdPdtnSXNs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1458871818&Signature=ctK5y4bzI~W~lM4f4w91Y~1j1Ur--g5M5VdmukfYcbfxjx-XWvCD2907kLNeEN4sV~7Lb74URrm4RX8sVQk1JxORL6D069m1ZFvjuj0JtkKcrm~eUDx0tHqVz4gKrxdVI5XV-81l9bcCDOPA5vIxI8K5RVVm8kVx2FbhAY0clt4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1480401884&Signature=G-B9yjy3FCcYsujJiAGmIu9uyzE1IztFFozFnrHAAomOWrAtxfj4eSidM7CDbyps4NbvUHrtKPwOuTmgmLWU2-Le65PmSpDhjyayTigrcMT9rqLQln9rEFhML0G2-WewNZRUczEpNWGIYXY3xk7cLuQ04WGFqwJnG6fiEAnYRWI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1475986419&Signature=aCJlh7HmmsBPaNbXLxTENaOX~0eb8G9jomXjLtbNvVooqOnOI4LjviOgvkEUT9O0v24D1~pwilGCk01pPFcrK-y7UlMC-GdjoZMm-baR5YaUmAeWGBP1nVSsJmcYE~X2LXRetgRUaO5wWxW6R9vCvkYlrN933qYej3UCgiWY3F8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1480565410&Signature=GaXjO39UnnmSS3r8llbtMaS1LDmWl3Dt1Y5oG6W62OoqwEFPxRIoTsj21dazoL0KbulPJ2H7bJOg-1gX3BvgOytfcRybz6zRwntCy6ezFVkI1Eul-GBi-umv6ZHxo3LQA6Q1ScrpAAvcyUn4b1oCz7uaEHb0lDzYJkB1YnK0-us_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1479193166&Signature=OUjSzvBUvNrd8fFfxRrUDAHt3sUUlwevv-wVur4UIxV~Sd-8fl064haNY4sVLg-OEQzQfbU6v0DsnpoQhsySYROfmhsxR1QLM5O5ZSrrV9OW43PPj8ftBk2fTnAsNPncWAEaIt6oJPtwHeaqPApzAtkfVH5HZb84tQ3izkBC95g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1477049174&Signature=NlUYptTIK2PD3p71TAnsJbTii2-bZBuvokCyd0h0g8Rli4fUSpwNNqmQFjjvgSsSHBEyN8rh7Q8MPAU1uw6DjFR1-x7h9P2fb~-fgZg2JvNmIlSG0dz4W42utjq0TaaeQ3YB4cY~1lhTYaHT2Zx5Asp3BAFrOKtOAXF3CSq7y8M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1478524041&Signature=eXRydbljZSo-W4-7Av9dZzL86SH8EKDqrEkZyoClqhoHX9d-YLVCUIC8yeiikryLMVj0ghmwJTE4xA-WkjLOxbHaBBeOS5SFFV8Z8IvPW87kYstbap0y1fUhLCLzNSV95S-QCsAsc2HJ639diq0zDOpCXSuQPIQYkFOxPyrQW3g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1476055856&Signature=J2ZzLK7L9DjKtAM3Vl7JZQTaytwquuwEj7AwL~mviYbQ-X8jXgBbDGtHeyfc6QbqBk5KfnOCOdUacfzUxGAFGy8cIpqwKSlrxZqh8Y4thoV65wE1HrWY2lua-k1WDcE6eCDZxXZsXjhfw~~DVXJ10wOF~~BCGop7ttLkxJv8DAQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1438212619&Signature=XBUDS~0yDChV20BhQF5eiaVy8-YDUbQDh5qTdHFFK71l4CIWFMKiiCLIJdzEPLnQlV92trLoz-iF2wLKx7AIl7fhysyxbDwHCqLSw4fwssy0W22CDgSPTVQqCwwgX5uj5UuDhoCLTAwIlBA4TtYwvFRHxKvI7VUTEWSSH8bAMxg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1479310052&Signature=ZJ~e3YvhdG5319i5UOb886Soi-mECe3-0wTWaC~QSXgDGUjxh9kqLKNrxI153~r83xdlvVU5MWHWF310IZno-w-wggF4guUDfM~3vzjV13q7Lp9eg3EZI6chJFmDcTA03un7esIYwwpJoj~IpfdZNcqh6ju9B1cIjHLHhKplnBI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1475756629&Signature=Hgz49UURHowQKcv6ifnreo~ejygtmjRd8gxFrPEqv4HjBk2AwkB2DPU4WO7nbcj9PN9jsdvZV62BvLqw75~op0b8f9bZdCc55eBW9vvDBNpQ7P1kloPNaXKkyVswN9dz8BtliUFAnsCs1sRdtQVhvZdmIlt3yuKVMZbMny8bK44_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1477820398&Signature=LkBfmIBqJX0WJ-X00attwBvybtpS-A~WJNrr9y85ter7BmBc1vaFDj-dR9ani6vXjPd3r-05AWpG0xzXILf8MAbhuSpOYjoZ8rX3ViOQ6dLoGiXohY3ItvWgcyRhqvLDZMGg-e67YKn10bW8EvEaHGNCdavg9DVQZ8HGCSl1C7E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1444269544&Signature=JKUPDhPWgN5RMWshe~PDt5H9NknPAo-Ns5hgIsX-P--UU7enufqJdIZ~Sw2tZVQdR9vnDKbj5rXl4YB08X-9cPnnEfWbAmvOx3PdPhdEbn5JIckRSyKyZFYvBeiGeVlyIbVDnyXq3KbYKd59BOrNp64aPXF5YIkZnEDudcX6XIQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1455680842&Signature=cw0JD-MGPEANs-GVA6nGeL1BJ82Ji4GzUPR5B-mM~HHPJz4GIzPZqJRRJ5CY6w~PthY7bnqJVEjuQlOgcFpzHu~o017~oce0EJG2Era11NVEy9fLKQVLM9-IQt0zZ~q9u2OEwJOkduUVwU80nBEX-2w8ApGbDMC~-kkYjK2Cy~Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1432670806&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OMueZrghPc9Kn~TYOTOLAzqhxaGFcpoyh9nsImA71wixE-Z4Txe-fRamKFVpgXK1jkm4lPntx6~q8EsdIp-yopWt0DAlJmhHcE5aFU8UMlo3xCl4CMHVlK3klSQ76WrEkZzVbKI9bQg~k-WYlQ4XukAjdoFJF4x1iQYTSSH4J08_&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_br&type=PROGRAM&Expires=1469362827&Signature=OafwhXkGjvakpH1IiKCS5F0BL9LD-GmOMJCaom69srune~bW6xebwdL8paCYpB7JGJX9~Ro4dm7BW2dq8S1YFsZu9w~mtfaw-Qxho8L2gO0pupQkCdMTVtHjQ1pyHqmzsZdU~ZDspSUtalZmmj~X-fZwAuQD4f7ehWDK34SceUM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

http://gsf-cf.softonic.com/eae/c07/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=59897&instance=softonic_en&type=PROGRAM&Expires=1452735454&Signature=U6Wp72X2aPfHNCt5TMIEBu8BMI~8IokLYkBTvxWCqlOhR9WXlFT~PkpqHs8pnOCM76IPJ2GlcfB1OjCro-1S9x8VOVjwC16KyWYQC7S8jP0gk6kzmumNa7nea5JP8RzuuBvDk1za74wJAKOFVQiAZdccKv7TxeS81HihhymFNlY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=va32.exe

Latest 30 of 57 download URLs

Scan va32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.