iview435_setup.exe

IrfanView Installer

Irfan Skiljan

This is a self-extracting archive and installer. The file has been seen being downloaded from download.instalki.pl and multiple other hosts.
Publisher:
Irfan Skiljan  (signed and verified)

Product:
IrfanView Installer

Version:
4.35

MD5:
687ac23f1356ca04cc65a0562a0c77b6

SHA-1:
7c88945853910be1c19ac8c9864501200ea2851a

SHA-256:
146733d6d3955805b330a346df00b8a8b71e8900741e434953255cbb363b6b37

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 10:52:48 PM UTC  (today)

File size:
1.6 MB (1,646,288 bytes)

Product version:
4.35

Copyright:
Copyright © 2012 by Irfan Skiljan, Austria

Original file name:
iview435_setup.exe

File type:
Executable application (Win32 EXE)

Language:
German (Austria)

Common path:
C:\users\{user}\downloads\iview435_setup.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
7/17/2012 7:00:00 PM

Valid to:
7/18/2013 6:59:59 PM

Subject:
CN=Irfan Skiljan, O=Irfan Skiljan, POBox=PO Box 48, L=Wiener Neustadt, S=NOE, PostalCode=2700, C=AT

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
4AAD33DAFC339E45E55F11ACE347D6C8

File PE Metadata
Compilation timestamp:
11/7/2012 4:13:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:grmJr9/n1XiGYn0k18/hdyI2h7OZu3+RxUX74h3Sy0547K:hrJhiGYnT8/hl2h7OU3+RxUX7G3Sy05x

Entry address:
0x2150D0

Entry point:
60, BE, 00, 80, 48, 00, 8D, BE, 00, 90, F7, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Entropy:
7.7771

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
1.6 MB (1,630,208 bytes)

The file iview435_setup.exe has been discovered within the following programs.

IrfanView (remove only)  by Irfan Skiljan
IrfanView is a image viewer for Microsoft Windows that can view, edit, and convert image files and play video/audio files.
www.irfanview.com
2% remove it
QQEvolution  by QuickQuote
Http://www.qqonline.com
About 6% of users remove it
SnapPea  by Wandou Labs
The software currently distributes the app through the OpenCandy monetization platform which is known to distribute adware.
snappea.com
25% remove it
 
Powered by Should I Remove It?

The file iview435_setup.exe has been seen being distributed by the following 50 URLs.

http://download.instalki.pl/programy/Windows/Grafika/.../iview435_setup_www.INSTALKI.pl.exe

http://www.filehorse.com/download/file/.../

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1Mjc2MjAyNDtzOjI6ImlkIjtpOjk4MDc7czo0OiJmaWxlIjtzOjE4OiJpdmlldzQzNV9zZXR1cC5leGUiO3M6MzoidXJsIjtzOjQ4OiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvaXJmYW52aWV3LTQtMzUiO3M6NDoicGFzcyI7czozMjoiMWM5YTM2NDg0OTE3YmE2N2ZiY2IyNzczM2I0ZmM5MWQiO30=

http://www.chip.pl/download_files/87405a9015e4ce6857e1e1c0b69e4150/.../iview435_setup.exe

http://dl.exfilesdownload.com/n/3.1.22.3/.../IrfanView.exe

http://fileforum.betanews.com/sendfile/967963863/1/.../iview435_setup.exe

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ4MDA3MDk1MTtzOjI6ImlkIjtpOjk4MDc7czo0OiJmaWxlIjtzOjE4OiJpdmlldzQzNV9zZXR1cC5leGUiO3M6MzoidXJsIjtzOjQ4OiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvaXJmYW52aWV3LTQtMzUiO3M6NDoicGFzcyI7czozMjoiMTRkZmMxMDRjNTIwMmZiMmRiZThjMWEwMmIyN2VlMDkiO30=

http://www.blunck.dk/.../iview435_setup.exe

http://software.utilidades-utiles.com.s3.amazonaws.com/iview435_setup.exe

http://irfanview.tuwien.ac.at/iview435_setup.exe

http://www.djvu.com.pl/download/.../iview435_setup.exe

http://www.filehippo.com/download/file/.../

http://fs40.filehippo.com/3691/.../iview435_setup.exe

http://downloads.zoznam.sk/.../irfanview-9?did=12171

http://188.226.135.21/iview435_setup.exe

Latest 30 of 52 download URLs

Scan iview435_setup.exe - Powered by Reason Core Security