home

viber.exe

Viber Media Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Viber’. This is installed with Viber.
Publisher:
Viber Media Inc.  (signed and verified)

MD5:
3e0518aba170fb04274039905a93d871

SHA-1:
6432be7176e8b62aa08ad2f119e66b4c127b20a1

SHA-256:
49d45dc9e28562abdfe6e68ebfa756a78ed77f3245b9e685224384f47bf5a3b0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:14:36 PM UTC  (today)

File size:
914.5 KB (936,456 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\viber\viber.exe

Digital Signature
Signed by:
Viber Media Inc.

Authority:
Thawte, Inc.

Valid from:
3/28/2012 1:00:00 AM

Valid to:
3/29/2014 12:59:59 AM

Subject:
CN=Viber Media Inc., OU=DEV, O=Viber Media Inc., L=Panama, S=Panama, C=PA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
73C6D14119B06C7562CA81A8BEFDCED1

File PE Metadata
Compilation timestamp:
3/5/2014 9:05:01 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:zOCvLn18XcBJ4NKlmrY9QHRUyEv2eg3FGA/kKZKyJ3/8fPROXo:zVfa9RfEv2JGA8ihOfw

Entry address:
0x91B6C

Entry point:
E8, D2, 04, 00, 00, E9, 6B, FD, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 14, 87, 4B, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F4, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 6A, 14, 68, B8, C0, 4A, 00, E8, D7, 01, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89...
 
[+]

Code size:
594.5 KB (608,768 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Viber

Command:
"C:\users\{user}\appdata\local\viber\viber.exe" startminimized


Windows Firewall Allowed Program
Name:
C:\Documents and Settings\Henry\Local Settings\Application Data\Viber\Viber.exe


The file viber.exe has been discovered within the following programs.

Viber  by Viber Media Inc
Publisher's description - “Viber for Windows lets you send free messages and make free calls to other Viber users, on any device and network, in any country! Viber syncs your contacts, messages and call history with your mobile device. All the stickers from your mobile phone, now on your desktop.”
www.viber.com/products/windows
About 3% of users remove it
 
Powered by Should I Remove It?

Scan viber.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.