home

ivona_installer_ne.exe

IVONA

IVONA Software Sp. z o.o.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from s7683.chomikuj.pl and multiple other hosts.
Publisher:
IVONA Software Sp. z o.o.  (signed and verified)

Product:
IVONA

Description:
IVONA Setup

Version:
1.1.9.0

MD5:
13b77f3e24c7be0af513de71e0823824

SHA-1:
b4be972cffa23b45cbe63f11dec48e401b5ff6ea

SHA-256:
24ce04d943d16a2d64a874e4a11edfecf2c7821f1e13f8abd67b8a16db945e26

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/17/2024 3:00:03 AM UTC  (today)

File size:
8.9 MB (9,363,792 bytes)

Product version:
1.1.9.0

Copyright:
(c) 2009-2013 IVONA Software Sp. z o.o.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ivona_installer_ne.exe

Digital Signature
Signed by:
IVONA Software Sp. z o.o.

Authority:
VeriSign, Inc.

Valid from:
5/13/2014 10:00:00 AM

Valid to:
8/13/2015 9:59:59 AM

Subject:
CN=IVONA Software Sp. z o.o., O=IVONA Software Sp. z o.o., L=Gdynia, S=Pomorskie, C=PL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7B5CEB3072327FB1D06E1C251CAD087E

File PE Metadata
Compilation timestamp:
2/25/2012 6:20:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:+n677Ul62pRT4ctD9F93gyJPGL+lMRc25jfevlUs0ZsofNuYZqqF1:+nl423UcHNbGSMR1fY2sOmMd

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
7.9974

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file ivona_installer_ne.exe has been seen being distributed by the following 13 URLs.

http://s7683.chomikuj.pl/File.aspx?e=uuICMyxzmQPdSuYzy11s6OVtrY6JLVpuT-dhCawbKq_ShaSrImXUiFjmt9ULerZpo7oH2dziR7ue_f6fETDoFmLvPyHS4ozvT5U7y79zX6NG5Diw6XbAxiPjKvHwKo-rtSTOGcc-swfWTv0TTOcmCQ&pv=2

http://www.bytesendclear.com/dhfcYTyYzZTpjrXZCUVzjk9G1SCLBUURmaQY1G6S8bpxUF5zSfXCiI_IGS6Y2coGI9ERqXmBoQ6od24_jNFXTVBvRL3vriNBNtJEN20yFOG2FptRkqEES_cWqsbI0YhE5qTQjvJINlT5hiA2TtC1FBpaOVVkGEeL15Tdt7alULapZB4nTPRctEdu8Q3nOsL4jAeG8t4zNhtDXJdDns8en8ATNXmauKH6k5cmnbW7bxsT2Zi5MP_GCaN8wmPv970zczxtHJ2TFHfICHe fiDzMNjqAXeKLQP_EgT5mczcvNxTAqNWxPaP8We8QjQtFHXXakph45PBWAfAXpyr cBpoDlVtWa6evssT9NtDqIWTjjk6HqTMdkXMcUGkohUoL5hk2TFT8N4kZ038kW4EVv52Z5avAcJAarAIDy 4wsv1g vDw0MNV5g1cNX 9VyfOPi9vXkpSDVfnsN vv8MvO1tBlIeuxBXQlp0s54nQBZMBjvLJotn5GDSG7Lf_TxgzUdvs6lAThrogfbOQUBoyiFjuvJ6 QlU9KsZOjj2DCDJh635C8zFOrIlEtc9Nscw vkM VrSblxqzZLx5eZ CqBq6hsXDwokQWNpo4M1xgVyrnPrdKRgMs=-G3wAAGTYtrmAsZlWXiqtBIccOHxpoIF5HAAEEzkMJGi7XG_MIoPcB1yXncnZBbmY_YNrRDgIdSy7Y0nJ9l_J3zEf4AAzSOZZoWSsStwqJtWOknuZGRGNuPk4yePIrKB6FQ==

http://www.bytesendclear.com/KbLAfZX0VhIDrW3zlJfIk3Fi0cad0Hrn7ftLZlFxOTrZM2Ynew H4Mm0cK0BIKGmxqjmkQZ OOvw7SPRyMSA4TixYD45l0iGap3OYThcYyAIFz0c2AhhcXQz8LShaIMN_nsjrgonBlqhNzmDeUmkntnUd6Jm88xN w0QqESxe1pTwQwL7Qhi621dmjj5AubHp0FQvuAzhG2nt21gHcQ KAhpKTcOeOAeCOuenFOkn6zsgJE1TimQslVq S54o4BrySiMduQ0iqq0ThhoL1QPhl3TasEZTtFdxjfDnt1JyYwQjZdxZthcivBgylX3 ptowRvqdRV3o0LZGR2gJlS7PT9Q2RVSvyRBNPIhCkh1xy9r9BF4X_kfpywAiJg1U6QovE6wyWi5J4KCHVg_gLABM6sBqulTi_1UMx LDC3wD_8Tlkxdvd68ISTy6pbJdRAeDP9dFul442FWzWDXe80v1NblENSlsWO jU8AnlFmUKUyuOEkxMg7Mrr13vmEkbxBAF ex3jLVwGGSyqEUtgYjqILeip79vXPZAd zhINFpgpj7o26NOW1D38KSjFCXKrqJiSKfvNp4YZqym4aoccOYVU5tuuRV_4JN7jeYfKCvgybLFE5T Vcqz8ddzK3CjQWSoVG9Q -G3wAAGTYtrmAsZlWXiqtBIccOHxpoIF5HAAEEzkMJGi7XG_MIoPcB1yXncnZBbmY_YNrRDgIdSy7Y0nJ9l_J3zEf4AAzSOZZoWSsStwqJtWOknuZGRGNuPk4yePIrKB6FQ==-E

http://www.bytesendclear.com/OQuoJ0bYxo1vEZgz3Vhk6pRxo17CHuiEb0ZcWMZ ZkYMJ3QrtKLm8JaHElA2KIDRmJpxRmEqn7tXXLEwH1VIv6dLq6IwqsdsSzmDQ77CNXV4X1QFZw_vot3ug40dGdOKQ07wFEAxJi6VaOXxWfpYnN2jHU6GsiIzeQ6kT3rEqMRqqHZ46AeoDuvXPX3jox5xx_zwQALqQerxKJLh7gVdgXENXYHg0T97u6msJgqW62T2zO8dCNlmpoXzOqMNl4qRyHW6BxKNO fWw ar 9eBimOd_B7S2wD6IEn_NcXTdcph_YAbEqE2BKkAA8pGO93uMdaqZ44uJugr8o_seCgj7OmhoyS5t6s3iGCCLDE6RSfjgcOrTk0MyQ4aqYT_pRJTzGga49aW52xbRXxiC4X7YfevoKQVhMnR5 KJqYHUo1yXA0gn_RhiZS3Y24455thhnYzaW8eOccm_KcuXoIDfsHwLdnv04IiSg6WHHavc_mvcO2HI6d_Gmbj5sEuiKQGcdT7EwY OqJbhaexbX1mLsoQw6Dg95vne3nF_UCl3Yxs_4TMFzVTvql4SFTlfyvGmyHQ2QUyUhK_ItB2at6e 1Lw71gbzys7IDDiWTYZ 4jRcVL18HQSRh4BIh_6xOAjrSPTCr8s2-G3wAAGTYtrmAsZlWXiqtBIccOHxpoIF5HAAEEzkMJGi7XG_MIoPcB1yXncnZBbmY_YNrRDgIdSy7Y0nJ9l_J3zEf4AAzSOZZoWSsStwqJtWOknuZGRGNuPk4yePIrKB6FQ==

http://www.bytesendclear.com/U05u8d1jvHmW75dJLycqUm6e5a0GJ2QUI1u0IU1k9FfgC cK3ntwYDIUdbwXzZc2LoCaUbZMZvRxgBMVsAqYbZdt4F7eWG6BAXiPwak0dWyo0dKa1NwXuyLAhfaP4CBAPpf6EfuVD_BJ3ApupdB7KULFw1F_JAvYamV0incHnujq4qXHvdDjkkHbwOT4DIt_DyX4niCOFSSEJvPDPILVQgx80_PD3_KMKny5KRf1MQlpQEtppQsA7eaPxB3Cte70knqQIURHDA8GGNayeZol2a_qjSb1cx9dFKmwoBkb0eiPh1tpqUwrMv2Kc1 OKGk OFC zQZmZ27uYaK0MJ_1P3tKKBnN71ktRzmgfBHJkbMM3eJrrfCFzllRetgOHD7lITKxiSSHprFEkpNjImSbqyOgmIUHFfYbzKGpd0GeYQHS3 a9__4wvfMs7SM tS7KqfNRehw0tiUkk6PhmPqz8OABM8HVzJAFQI9rqAsHVG9aeAe_LhkEH2k6VMfsHEhPbVVsrFBFjxS8AhVqUlv EM5ZEi1Qr9P_Pdzy3uTEy330qhU8GRqrpVeCccwvsf4iRFa2eKwvXdGFv7XGRHXV6vnW07orxHDiIAO5Ns PqUZoOwbH5SVKNhc4qVjOzfe Y1fbn6Yd-G3wAAGTYtrmAsZlWXiqtBIccOHxpoIF5HAAEEzkMJGi7XG_MIoPcB1yXncnZBbmY_YNrRDgIdSy7Y0nJ9l_J3zEf4AAzSOZZoWSsStwqJtWOknuZGRGNuPk4yePIrKB6FQ==-E

http://www.bytesendclear.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

http://www.bytesendclear.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

http://85.25.41.239/.../ivona_installer_ne.exe

http://85.25.103.79/.../ivona_installer_ne.exe

http://www.signtowntoday.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

http://www.programosy.pl/.../pobierz,ivona-reader,2.html

http://188.138.71.121/.../ivona_installer_ne.exe

http://prod.download.ivona.com.s3.amazonaws.com/pub/.../ivona_installer_ne.exe

Scan ivona_installer_ne.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.