» iview442g_x64_setup.exe
Overview
Analysis
File Details
Downloads (12)

iview442g_x64_setup.exe

IrfanView 64-bit Installer

Irfan Skiljan

This is a setup and installation application. The file has been seen being downloaded from get.load-balance.net and multiple other hosts.

File name:

Publisher:

Irfan Skiljan (signed and verified)

Product:

IrfanView 64-bit Installer

Version:

4.4.2.0

MD5:

63aa50981245e94e0e51d0e7422e356c

SHA-1:

5bb50430d1b4b6e842efc73d0b006cab397a9761

SHA-256:

2dd6ffed54965c84ba8a9000ca06e7fda112d6df05d74ccdbff3b4d374bf4db6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 4:07:38 AM UTC (today)

File size:

3.5 MB (3,635,680 bytes)

Product version:

4.4.2.0

Original file name:

iview442g_x64_setup.exe

File type:

Executable application (Win64 EXE)

Language:

German (Germany)

Digital Signature

Signed by:

Irfan Skiljan

Authority:

COMODO CA Limited

Valid from:

2/2/2016 1:00:00 AM

Valid to:

2/3/2020 12:59:59 AM

Subject:

CN=Irfan Skiljan, O=Irfan Skiljan, STREET=Postfach 48, L=Wiener Neustadt, S=NOE, PostalCode=2700, C=AT

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00E50CACF3CFD70EAEBF28A3A5E04ED4A7

File PE Metadata

Compilation timestamp:

3/10/2016 2:37:48 PM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

98304:STs1eJkOVHvyuxHEW2lkl3hWa+3CwZ7RVb8ZpX:STCokSySkW2el3hWa+3p7bYX

Entry address:

0x2FFC4

Entry point:

48, 83, EC, 28, E8, 7F, BB, 00, 00, 48, 83, C4, 28, E9, 02, 00, 00, 00, CC, CC, 48, 89, 5C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 30, E8, C0, 6A, 00, 00, 0F, B7, F0, B9, 02, 00, 00, 00, E8, 0B, BB, 00, 00, B8, 4D, 5A, 00, 00, 48, 8D, 3D, FB, FF, FC, FF, 66, 39, 05, F4, FF, FC, FF, 74, 04, 33, DB, EB, 31, 48, 63, 05, 23, 00, FD, FF, 48, 03, C7, 81, 38, 50, 45, 00, 00, 75, EA, B9, 0B, 02, 00, 00, 66, 39, 48, 18, 75, DF, 33, DB, 83, B8, 84, 00, 00, 00, 0E, 76, 09, 39, 98, F8, 00, 00, 00, 0F, 95, C3, 89... 
[+]

Code size:

278.5 KB (285,184 bytes)

The file iview442g_x64_setup.exe has been seen being distributed by the following 12 URLs.

https://get.load-balance.net/?SzejalzwYYiQKSSX91wWvou2d

https://get.load-balance.net/?KUCq9r2QqH1hJhNn1uCUtsHT9

https://download.heise.de/software/66a0b129531bcc1f4d9cbfe6b532e8e8/57816264/.../iview442g_x64_setup.exe

https://download.heise.de/software/5d38b75f95e3d00daa2db7125729cd62/57eee287/.../iview442g_x64_setup.exe

https://download.heise.de/software/bc33633683360b4fd679b0cf51c4e794/576475ea/.../iview442g_x64_setup.exe

http://domainunion.de/.../iview442g_x64_setup.exe

https://download.heise.de/software/4d62961f08c3fd6e838dc0fc848b43ea/570e63e8/.../iview442g_x64_setup.exe

http://irfanview.info/.../iview442g_x64_setup.exe

https://download.heise.de/software/67b66d298be5ab06847c9eb893ae67e8/57587373/.../iview442g_x64_setup.exe

https://download.heise.de/software/ccb15f8d4ff1f32969b6a5f9e8874bb9/56ebe84f/.../iview442g_x64_setup.exe

https://get.load-balance.net/?uNITj66WMqzbdlnxE3D3xKtQD

http://dl.cdn.chip.de/downloads/.../iview442g_x64_setup.exe

Scan iview442g_x64_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.