home

setup_fileviewpro_2016.exe

FileViewPro

Safe Installer

The application setup_fileviewpro_2016.exe by Safe Installer has been detected as a potentially unwanted program by 3 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.downloadsrepositorystock.com and multiple other hosts.
Publisher:
Solvusoft  (signed by Safe Installer)

Product:
FileViewPro

Version:
1.2.3

MD5:
a6abfc89867eecfbfc2b35cad6a20bdf

SHA-1:
957cb49bbde604c58089cf3f5fbd5de8f10d76a0

SHA-256:
55078fc1265628dc3f51a47f707ce012b8f394fb0dc8b184dde2e493f56b4f6b

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
11/22/2024 5:19:25 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Solvusoft.B potentially unwanted application
6.3.12010.0

F-Prot
W32/Solvusoft.A
4.6.5.141

Reason Heuristics
PUP.Solvusoft
16.10.18.18

File size:
1.8 MB (1,838,144 bytes)

Product version:
1.2.3

Copyright:
� Solvusoft 2016

Trademarks:
FileViewPro is a trademark of Solvusoft

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\setup_fileviewpro_2016.exe

Digital Signature
Signed by:
Safe Installer

Authority:
COMODO CA Limited

Valid from:
5/4/2016 2:00:00 AM

Valid to:
5/5/2017 1:59:59 AM

Subject:
CN=Safe Installer, O=Safe Installer, STREET=848 N. Rainbow Blvd., L=Las Vegas, S=NV, PostalCode=89107, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
5EB27C8A2C2166B9A7DC522783A3406F

File PE Metadata
Compilation timestamp:
11/9/2014 12:22:09 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:jRSmH5yWt0V1ekvZ9RakS4voxCnF0TSy8qRSQEGx:tSmZt01tvZ9oN4vo4ARz/

Entry address:
0x3BE3

Entry point:
81, EC, CC, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, BF, 00, A2, 40, 00, 59, 89, 6C, 24, 10, 8B, DD, 8B, F1, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, A8, 90, 40, 00, 55, FF, 15, C4, 92, 40, 00, 6A, 08, A3, 24, 9D, 95, 00, E8, AC, 33, 00, 00, 55, 68, B4, 02, 00, 00, A3, 90, DD, 92, 00, 8D, 44, 24, 30, 50, 55, 68, 88, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 8C, A2, 40, 00, 68, A0, DD, 92, 00, E8, 06, 36, 00, 00, FF, 15, A0, 90, 40, 00, 50, 68, 40, 17, B1, 00, E8, F5, 35, 00, 00, 55, FF, 15, BC...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
30 KB (30,720 bytes)

The file setup_fileviewpro_2016.exe has been seen being distributed by the following 37 URLs.

http://www.downloadsrepositorystock.com/dwjnSVVUzd9g9VxAsTHu7GorT4KsL5ZOlCdgEVJQDh4r9OklabgDagdlWzf4LINlEBcB8rjwkbJ UJ7ROKzULhmnlOAYKN79i1mbxPNml4oxL_G_VF8Pdk4vuDtL5Uw7lUwJekGXndHWBw_4iJAm7QBY4kclmg==-G0cAAEQ3F5uWZjY004IgTBTPHeOA_XuQwQZcB8fhc8WI6ktrbNDIst7Fia4sZfXyAOL1UC0Lh5H6MGpXwQc=

http://www.solvusoft.com/da/download/fileviewpro/.../

http://www.solvusoft.com/file-downloads/builds/static_delivery/installers/fileviewpro/stk/.../Setup_FileViewPro_2016.exe

http://www.solvusoft.com/th-th/download/fileviewpro/.../

http://redirect.viglink.com/?key=a33a55f65ed7e82bdfcec34a1447b2db&u=http://www.solvusoft.com/pt-br/download/fileviewpro/.../

http://www.solvusoft.com/fi/download/fileviewpro/.../

http://www.solvusoft.com/cs/download/fileviewpro/.../

http://webplayer.unity3d.com/.../UnityWebPlayer.exe

http://www.solvusoft.com/ko/download/fileviewpro/.../

http://www.solvusoft.com/zh-cn/download/fileviewpro/.../

http://www.solvusoft.com/bg-bg/download/fileviewpro/.../

http://www.solvusoft.com/ja/download/fileviewpro/.../

http://www.solvusoft.com/pt/download/fileviewpro/.../

http://www.solvusoft.com/file-downloads/builds/static_delivery/installers/fileviewpro/spf/.../Setup_FileViewPro_2016.exe

http://download.solvusoft.com/downloads/.../FileViewPro_2013.exe

http://www.solvusoft.com/hu/download/fileviewpro/.../

http://www.tucows.com/download/windows/.../FileViewPro_2013.exe

http://www.solvusoft.com/el/download/fileviewpro/.../

http://interia.hit.gemius.pl/hitredir/id=0stLay_GdLtDbdkbymp0ldU7jwzB44_kkcXH2eUJVFv.07/url=http://download.solvusoft.com/downloads/.../FileViewPro_2013.exe

http://221.180.170.25/cache/www.solvusoft.com/file-downloads/builds/static_delivery/installers/fileviewpro/spf/.../Setup_FileViewPro_2016.exe

http://www.solvusoft.com/de/download/fileviewpro/.../

http://www.solvusoft.com/fr/download/fileviewpro/.../

http://www.solvusoft.com/it/download/fileviewpro/.../

http://www.solvusoft.com/nl/download/fileviewpro/.../

http://www.solvusoft.com/ar/download/fileviewpro/.../

http://www.solvusoft.com/file-downloads/builds/static_delivery/installers/fileviewpro/stk/.../Setup_FileViewPro_2016.exe

http://www.solvusoft.com/en/download/fileviewpro/.../

http://www.solvusoft.com/tr/download/fileviewpro/.../

http://www.solvusoft.com/zh-tw/download/fileviewpro/.../

http://www.solvusoft.com/ru/download/fileviewpro/.../

Latest 30 of 37 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to a104-83-5-8.deploy.static.akamaitechnologies.com  (104.83.5.8:80)

TCP (HTTP):
Connects to 18.183.246.94.ip4.epix.net.pl  (94.246.183.18:80)

TCP (HTTP):
Connects to a193-212-178-9.deploy.akamaitechnologies.com  (193.212.178.9:80)

TCP (HTTP):
Connects to ext-189-247-165-105.uninet.net.mx  (189.247.165.105:80)

TCP (HTTP):
Connects to a118-214.160-234.deploy.akamaitechnologies.com  (118.214.160.234:80)

TCP (HTTP):
Connects to a96-6-123-96.deploy.akamaitechnologies.com  (96.6.123.96:80)

TCP (HTTP):
Connects to a92-123-180-99.deploy.akamaitechnologies.com  (92.123.180.99:80)

TCP (HTTP):
Connects to a92-123-180-72.deploy.akamaitechnologies.com  (92.123.180.72:80)

TCP (HTTP):
Connects to a23-14-84-203.deploy.static.akamaitechnologies.com  (23.14.84.203:80)

TCP (HTTP):
Connects to a184-51-148-88.deploy.static.akamaitechnologies.com  (184.51.148.88:80)

TCP (HTTP):
Connects to pc-120-255-46-190.cm.vtr.net  (190.46.255.120:80)

TCP (HTTP):
Connects to host-213.158.175.83.tedata.net  (213.158.175.83:80)

TCP (HTTP):
Connects to host-213.158.175.33.tedata.net  (213.158.175.33:80)

TCP (HTTP):
Connects to c906054a.virtua.com.br  (201.6.5.74:80)

TCP (HTTP):
Connects to bto-04-088.bto.ras.cantv.net  (200.44.23.216:80)

TCP (HTTP):
Connects to akamai-136.tachyon.net.id  (115.124.93.136:80)

TCP (HTTP):
Connects to a96-6-123-91.deploy.akamaitechnologies.com  (96.6.123.91:80)

TCP (HTTP):
Connects to a95-101-72-200.deploy.akamaitechnologies.com  (95.101.72.200:80)

TCP (HTTP):
Connects to a88-221-83-154.deploy.akamaitechnologies.com  (88.221.83.154:80)

TCP (HTTP):
Connects to a62-127-145-146.deploy.static.akamaitechnologies.com  (62.127.145.146:80)

Remove setup_fileviewpro_2016.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.