irfanview_plugins_444_setup.exe

IrfanView 32-bit Installer

Irfan Skiljan

This is a self-extracting archive and installer. The file has been seen being downloaded from download.fosshub.com and multiple other hosts.
Publisher:
Irfan Skiljan  (signed and verified)

Product:
IrfanView 32-bit Installer

Version:
4.44

MD5:
b1f7fb290f598e3356a9732c0ea0e3af

SHA-1:
ad5e60a6c807384ac87813c96190c652dbef8f3e

SHA-256:
2802ca82b660c5fcf8948f41671710f71c4ba4e648581bc4f3a87a5ed5f05364

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 7:53:44 AM UTC  (today)

File size:
15.5 MB (16,209,880 bytes)

Product version:
4.44

Copyright:
Copyright © 2016 by Irfan Skiljan, Austria

Original file name:
irfanview_plugins_444_setup.exe

File type:
Executable application (Win32 EXE)

Language:
German (Austria)

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
2/2/2016 2:00:00 AM

Valid to:
2/3/2020 1:59:59 AM

Subject:
CN=Irfan Skiljan, O=Irfan Skiljan, STREET=Postfach 48, L=Wiener Neustadt, S=NOE, PostalCode=2700, C=AT

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E50CACF3CFD70EAEBF28A3A5E04ED4A7

File PE Metadata
Compilation timestamp:
12/20/2016 1:28:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x11EAF60

Entry point:
60, BE, 00, 90, 67, 00, 8D, BE, 00, 80, D8, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Entropy:
7.8053

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
15.4 MB (16,199,680 bytes)

The file irfanview_plugins_444_setup.exe has been seen being distributed by the following 18 URLs.

https://download.fosshub.com/Protected/expiretime=1483651928;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/8773a4a155d6a49590b72cb2e7b544a58f5fa555313f6f34cf50f8266b30c6cd/.../irfanview_plugins_444_setup.exe

http://irfanview.info/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1482889978;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/b4680a12e4273e71d833441ad81f4cc0c7fb5591db50f6e724696f7980e9a87c/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1485410641;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/3ba96b1f7a25d4083cdaa1f726bf3901b0b0c6c78fd3bdb641de0f9d7945ae57/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1485219354;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/eeffb98a435cfa972dd28ad2f7cb7c95a33d2cf1927d4333d737386d3d6a691e/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1483150344;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/483f2a6915f4f5fcab69e5f48d1fd74fb5f97bab3c0a2df5f09733e17471bc66/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1484033846;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/17986fc7772167c80fb113ea053ff55c40e1cfbef1d844c3a1062ea130e23b17/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1484839368;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/d5da970f23d6e47f2f2578d46d233b9356616377561c0facf8e04bd1e0677f9b/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1484805022;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/17df750440e0944833100ca2d6e802342463e5fc009c08ba65e7c1db02a418a7/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1484040838;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/2e6c7ced8bc5fdd77d6a8927f848d90d0ca7a070460b6b0460a5dafca2f89483/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1484203640;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/6a6a050763654f0f05027d2fb2d9c6933e5f785dcc3e5d877c7e7fec1467d3be/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1484168937;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/8f33b8136651ded96a4454a7504f8782424d8e05613f92a6ba5982f787569154/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1483399074;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/386e54eb09a03121f354904d99a606302a4847b27d08079ad30a322a3fb2774c/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1482867043;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/352d8a724f4b2ac5d942377e78b22d96b22e0d144601c58743c2498d1db60a0a/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1483168315;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/96415bdbe13b04ea42ca8c56ef6c04a6f5b4eb2dc520ff8bfbe633c5e57d6ae6/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1483659220;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/99ffdbbea23fbad48c6f6f14b89944785b6db19a50ee06960de2e1a7875e2eac/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1482976569;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/d3130294de06e78f739fc4a2c8515a1922130fa5cabe8b2275e60705553c2102/.../irfanview_plugins_444_setup.exe

https://download.fosshub.com/Protected/expiretime=1483744438;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9JcmZhblZpZXcuaHRtbA==/49d170255a6913f06991415fc998fb9ac1d0cb2ab8c0c52e89193f07b51f6525/.../irfanview_plugins_444_setup.exe

Scan irfanview_plugins_444_setup.exe - Powered by Reason Core Security