viber.exe

Viber Media S.a.r.l

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Viber’.
Publisher:
Viber Media S.a.r.l  (signed and verified)

MD5:
4f31b278aa72f59e26b36759036d7e35

SHA-1:
4428027aa60505f2e732cc4d14bc0896d0e994ab

SHA-256:
cbeb86c1ee23ae89ad30eab3f1f2cbf5b0f4842a7c7e7e74eff61264b4a717b1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:29:50 PM UTC  (today)

File size:
76.3 MB (80,036,560 bytes)

File type:
Executable application (Win32 EXE)

Language:
engleski (SAD)

Common path:
C:\users\{user}\appdata\local\viber\viber.exe

Digital Signature
Authority:
Thawte, Inc.

Valid from:
5/14/2014 2:00:00 AM

Valid to:
4/28/2016 1:59:59 AM

Subject:
CN=Viber Media S.a.r.l, O=Viber Media S.a.r.l, L=Luxembourg, S=Luxembourg, C=LU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
5B2B01101C2900E34ECB16F78E6B73BF

File PE Metadata
Compilation timestamp:
5/25/2015 4:39:35 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x63F78D

Entry point:
E8, 92, 0A, 00, 00, E9, B3, FD, FF, FF, CC, FF, 25, 2C, 54, BD, 00, 3B, 0D, 28, FF, EF, 04, 75, 02, F3, C3, E9, 12, 0B, 00, 00, 8B, FF, 55, 8B, EC, F6, 45, 08, 02, 57, 8B, F9, 74, 25, 56, 68, 36, 04, A4, 00, 8D, 77, FC, FF, 36, 6A, 0C, 57, E8, 72, 01, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, 26, 00, 00, 00, 59, 8B, C6, 5E, EB, 14, E8, 51, 0C, 00, 00, F6, 45, 08, 01, 74, 07, 57, E8, 0F, 00, 00, 00, 59, 8B, C7, 5F, 5D, C2, 04, 00, CC, FF, 25, 28, 54, BD, 00, FF, 25, 24, 54, BD, 00, FF, 25, 20, 54, BD, 00, FF...
 
[+]

Entropy:
7.5786

Code size:
7.8 MB (8,207,360 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Viber

Command:
"C:\users\{user}\appdata\local\viber\viber.exe"


Scan viber.exe - Powered by Reason Core Security