home

vibersetup.exe

Viber

Viber Media S.a.r.l

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.tamindir.com and multiple other hosts.
Publisher:
Viber Media Inc  (signed by Viber Media S.a.r.l)

Product:
Viber

Description:
Viber Install

Version:
4.4.0.134678

MD5:
4a01eb2124846787b081029aa1f378a8

SHA-1:
c649a98452a4ff0e920cbcbd762ad8e11a89b158

SHA-256:
99de78adf1ee0fc9b7656aae2fad5ccb9f2c1c2a8b9174c95e26787c8f7e919b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/26/2024 11:11:52 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Adware.Searchsuite-3
0.98/21411

File size:
1.2 MB (1,296,032 bytes)

Product version:
4.4.0.134678

Copyright:
Copyright (c) 2012

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\vibersetup.exe

Digital Signature
Signed by:
Viber Media S.a.r.l

Authority:
Thawte, Inc.

Valid from:
5/14/2014 3:00:00 AM

Valid to:
4/28/2016 2:59:59 AM

Subject:
CN=Viber Media S.a.r.l, O=Viber Media S.a.r.l, L=Luxembourg, S=Luxembourg, C=LU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
5B2B01101C2900E34ECB16F78E6B73BF

File PE Metadata
Compilation timestamp:
5/30/2013 11:09:15 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:LGY6g4I1r+4ZbJCP+kzQBMISqyU/j8IB3rWWOvL134jG1HwV0w2UWCMFEP:KY6g42C8JCPNzQRXyU/jlq5534jG1QVD

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, BC, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 25, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 80, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 8F, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 7D, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29.5 KB (30,208 bytes)

The file vibersetup.exe has been seen being distributed by the following 50 URLs.

http://www.tamindir.com/indir/MjAxNS0wMS0xNCAyMDo0OToxNQ==/viber/.../3.0

http://www.commentcamarche.net/download/.../telecharger-34098241-viber-pc

http://global-shared-files-l3.softonic.com/c64/9a9/.../file?nvb=20150122064149&nva=20150122184249&token=02d34dd26bb1483264643&SD_used=0&channel=WEB&fdh=no&id_file=69660283&instance=softonic_en&type=PROGRAM&filename=ViberSetup.exe

http://182.48.78.82:8090/--== Softwere Zone ==--/.../ViberSetup.exe

http://global-shared-files-l3.softonic.com/c64/9a9/.../file?nvb=20150124101553&nva=20150124221653&token=0ed9ce27b6075db3933ae&SD_used=0&channel=WEB&fdh=no&id_file=69660283&instance=softonic_en&type=PROGRAM&filename=ViberSetup.exe

http://www.programosy.pl/.../pobierz,viber,2.html

http://viber.soft32.com/get/file/id/.../?rel=center

http://viber.bg.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqGPp6Oilpw=

http://fs40.filehippo.com/9360/.../ViberSetup.exe

http://download2203.mediafire.com/k93wzkg15slg/.../?????? ????? ?????????.exe

http://lb.cdn.m6web.fr/d/c/a/e3665d28fb7e47f94feedfbc4cd03d19/550a9f97/soft/.../viber_4-4-0_fr_430571.exe

http://global-shared-files-l3.softonic.com/c64/9a9/.../file?nvb=20150118220943&nva=20150119101043&token=0c1857b3303dacebb6ec8&SD_used=0&channel=WEB&fdh=no&id_file=69660283&instance=softonic_en&type=PROGRAM&filename=ViberSetup.exe

http://download679.mediafire.com/d8fz6c3r8rdg/.../?????? ????? ?????????.exe

http://global-shared-files-l3.softonic.com/c64/9a9/.../file?nvb=20150119184623&nva=20150120064723&token=04ec20d733ec4b112838c&SD_used=0&channel=WEB&fdh=no&id_file=69660283&instance=softonic_en&type=PROGRAM&filename=ViberSetup.exe

http://www.jetelecharge.com/telp.php?id=7256

http://skypolls.com/free-calls/go/.../

http://m.en.softonic.com/app/viber/.../launch

http://filehippo.com/download/file/.../

http://szoftverhotel.hu/dl.php?file=viber_4.4.0.3606.exe&p=1427523909.8744

http://download.s32cdn.com/41/408884/.../ViberSetup.exe

http://dl.cdn.chip.de/downloads/.../Viber44Setup.exe

http://lb.cdn.m6web.fr/d/c/a/26135d91232d0b427221324f94e27d51/54e08776/soft/.../viber_4-4-0_fr_430571.exe

http://lb.cdn.m6web.fr/d/c/a/31ccaeed22eef2f624754d798da96326/54978241/soft/.../viber_4-4-0_fr_430571.exe

http://10.100.100.2/download/others/Software/.../ViberSetup.exe

http://d.telechargerfiles4.com/?data=LckmbaAI1MC9TyKVJl6FoHwgDr1hgMpuXNwijik6c1x8YNYsdfWOOYYLXXuZC8t5r/G2fV8jSR5/qeIeCZP0EqGGAAbVB1A/DrUO1LeSsiIxgzWnF4QPr8mdH1mHbVWGzFrR9YMObtUAz7Qsec0MhhzRdBFMcX92ph4NlW2FlnfsA2wuw7ebKOCKTe/nADaNCAHqPU9I1m3DzvOCzdBM9Q99 dXOQJ58YETGPHZADJAywWO0zOZ69ZrYzSF7rhOlAwNHUxNulLN hsWzS0K4Kt eifbAVa9kQLWl0YAkCp55qMMPZo28Ig 660C vU7PaWY7sQVlqeKqSVX4Eif/qzkMdymop17VOC8L/Mz8glZNRvwlN tweFgnHWYSebKEyNuvqDYyNDyzbO601llfgs4Hon1mJbloD3qrXA2E4WTzvR9ZRPkOzMhHHHojhvlKqYHkeiGVX/yPg6L3jaKU 9bEb9S75JAyoF0BVr60HPhxv82l9LmMNSEq4P87zz37HXBlibGGpBs0MER Etpx&key=ph/XYDu1uRKQJ7vaGbGOAWYurro5fNqeahL1sLvObBoLpKCjfAUYdZBY1byEA4 0JH1xGCIWEGyobnIOaiy6mbDk/fFmoEsAoPerolZl22RPz5ce3TE7nd9azmoE8AQx4TOFq18DxQ1yCOQEq1R9GqGMdFWcRFkWSi9TSVpAf46slB/gyv8VKN6DNfsfRzFAQT7XfN6JRn7gX Yb99n0BrkCRGMNxsGPaPIUtX tbVWioZV qkeWfoqovLZYXb9dYtYeKPq3/0zBMn3oT7kHGTeyYiEddzRYV8rLtY1ZuQayO4ycHYL 4/Q7PvqqubY8cfwm1xf4WIuTFRqhG70njA==&ic_user_id=873&fallback_url=http://download.cdn.viber.com/cdn/desktop/.../Vib

http://global-shared-files-l3.softonic.com/c64/9a9/.../file?nvb=20150125075944&nva=20150125200044&token=04919e8296e4bdb148f27&SD_used=0&channel=WEB&fdh=no&id_file=69660283&instance=softonic_en&type=PROGRAM&filename=ViberSetup.exe

http://download1087.mediafire.com/u6au2zl0poug/.../?????? ????? ?????????.exe

http://lb.cdn.m6web.fr/d/c/a/c9716711b014c40da2d8b6b1524b7045/54e7485b/soft/.../viber_4-4-0_fr_430571.exe

http://sv2.funclub.pk/index.php/software/software_detail/.../VmliZXJTZXR1cC5leGU

http://download679.mediafire.com/y992928ra30g/.../?????? ????? ?????????.exe

Latest 30 of 74 download URLs

Scan vibersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.