vibersetup.exe

Viber

Viber Media S.a.r.l

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from viber.bg.softonic.com and multiple other hosts.
Publisher:
Viber Media Inc  (signed by Viber Media S.a.r.l)

Product:
Viber

Description:
Viber Install

Version:
5.2.0.2529

MD5:
9049ff632545928bed87d4760fc6dd09

SHA-1:
b0413846c8e612be81737468c9942896ac916963

SHA-256:
1b5132aeb05076c28d0bdb8408fcb568f5969523b3f65bed74692d4d835a26f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:33:57 AM UTC  (today)

File size:
64.6 MB (67,701,008 bytes)

Product version:
5.2.0.2529

Copyright:
Copyright (c) 2014

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\downloads\vibersetup.exe

Digital Signature
Authority:
Thawte, Inc.

Valid from:
5/14/2014 3:00:00 AM

Valid to:
4/28/2016 2:59:59 AM

Subject:
CN=Viber Media S.a.r.l, O=Viber Media S.a.r.l, L=Luxembourg, S=Luxembourg, C=LU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
5B2B01101C2900E34ECB16F78E6B73BF

File PE Metadata
Compilation timestamp:
2/24/2012 9:20:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1572864:7F3AwU7tvzOVrkh1BJ4t+kdSW+FAfvGZZIYA54znmXA15zl9oTsI9:7indztHJ4tbgAfveZyXa50Td9

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file vibersetup.exe has been discovered within the following program.

www.Toolwiz.com
About 4% of users remove it
 
Powered by Should I Remove It?

The file vibersetup.exe has been seen being distributed by the following 50 URLs.

http://viber.bg.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fl6iPnqSlkZg=

http://www.filehorse.com/download/file/.../

http://viber.bg.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fl6ePpJ6nlJo=

http://www.filehorse.com/download/file/.../

https://dw.uptodown.com/dwn/zdUvCtJWnl_d-GQrxHv-u6DhONv94jsgyhzCPLIdgBVkc0sAKoOg_yh3MN1hs7Tga8yMWb4zpzEJysNoptyP0Zz36QqTi7zbbR21ACFH3rBSHMPuh9kRjEaqjtnUVtX7/a_pgqGm0quHh70GC6ahB8nHYxkHWOaPSfhZuacSHucSUk_02bZr7bA5p06P24xnM_ezQe4-qvlLzzCEvIhJYJucIR9cWmgPsq3LquzfU-mHyD6gOjuLPerJYlWz_h2U-/GEFFZ56LyvE8oPVUVu9NJ-NFnmI5CrNZxYkyzuL4ypweyQ_5F4ajrgvO3cVa7O7J9DuxtXoU8ckh3Q7Wfd5hdBaJwqNw_vgMklAeBo2Q-zS1fcOtGHGZf5PCfjmMois1/.../

http://gsf-cf.softonic.com/819/a4c/.../ViberSetup.exe

http://www.filehorse.com/download/file/.../

http://filehippo.com/download/file/.../

http://o-viber.ru/goto/http://download.viber.com/desktop/.../ViberSetup.exe

http://viber.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPkyA8Y74Uvmh fTtY7pUIyLLVFzGIioS7lEPo2PUs9GRIuMnakQRNxDTHOFQPZbBKGJu/CjDbAmSovFmxHBKTO6/qzg3UYsKf/.../4AyUd635XRYBONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

https://dw.uptodown.com/dwn/iLmdJ553bMMWEAGtvia0_LDqo7k8v6nW2xvpCd4NAjpx1m4t6esqtGQwDGYoirFnYzHlydDivLf5hgMMyI7vNvKvVGI14lQ2dJF36yNVVoz1bNtoMCZfYVUk4zld4MFO/n1CMmkapqMwrRuoWIKq0RPSzSGT3AeMAt_rv4b3EZVguzgL9_xa160VcNaPGd1bu31gMwSPIswWRFObd9EghhhPmPES0r0qJzy1RtXYOaUoYeqscDNnVmk6u6RePy17l/muuY-PM2EkGBTJZtrtX4A-qkIULWr5qZN8gCL1bxOvNm7ey81N1pP8al9GN3EV_llRj5OE0j3fqWerCzj5Ri2h4EXHZFJ__zFyjvdU65EtNbZ9E3FgoF0tUaldEfGJ8p/.../

http://skypolls.com/free-calls/go/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://download.fileeagle.com/files/2015/.../ViberSetup.exe

temp:ViberSetup.exe

http://viber.he.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmJ-Ipp-jlZs=

http://172.16.15.20/backup/.../ViberSetup.exe

Latest 30 of 56 download URLs

Scan vibersetup.exe - Powered by Reason Core Security