home

ifunview.exe

Xequte Software

The program is a setup application that uses the Inno Setup installer. This is installed with i-Fun Viewer. The file has been seen being downloaded from ftp.myihor.ru and multiple other hosts.
Publisher:
Xequte Software   (signed by Xequte Software)

Description:
i-Fun Viewer

Version:
8.0.0.19

MD5:
ad1838eb1556c46e69f7f8dffa1bc4e6

SHA-1:
e06a3be81ebd94483413d50ae8563ae3e3955256

SHA-256:
a759598f3b76430956ddc7dda2ac51555e200b5eda1cc33bd9b2000bfee8170a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/22/2024 5:17:21 PM UTC  (today)

File size:
1 MB (1,081,072 bytes)

Copyright:
Xequte Software 1998-2006

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ifunview.exe

Digital Signature
Signed by:
Xequte Software

Authority:
The USERTRUST Network

Valid from:
9/20/2006 7:00:00 PM

Valid to:
9/20/2008 6:59:59 PM

Subject:
CN=Xequte Software, O=Xequte Software, STREET=PO Box 11-301, STREET=Manners St, L=Wellington, S=NA, PostalCode=NA, C=NZ

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
18D04D8A5E81BA195B9268A5FA68B3CE

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:hfOy5v8Nw8L5d+LdWF7mcF1Yv6JoVeYs7zk9W/npqD8iW2mfXw+a:hGamw8L6Lckc3YqKNs7zgFKDa

Entry address:
0x98BC

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 0A, 98, FF, FF, E8, 11, AA, FF, FF, E8, 3C, CC, FF, FF, E8, 83, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 66, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 1C, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, FC, D0, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, BB, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9837

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file ifunview.exe has been discovered within the following program.

i-Fun Viewer  by Xequte Software
Publisher's description - “i-Fun Viewer is fast, image viewer with support for all common image formats. It has an streamlined interface and is simple to use. It supports thumbnail browsing, image editing and slideshows.”
www.xequte.com/ifunviewer/index.html
7% remove it
 
Powered by Should I Remove It?

The file ifunview.exe has been seen being distributed by the following 3 URLs.

http://ftp.myihor.ru/ebeb339/graphics-and-design/.../ifunview.exe

http://i-fun-viewer.software.informer.com/.../

http://sawnet1.myihor.ru/72d3b7d/graphics-and-design/.../ifunview.exe

Scan ifunview.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.