home

viber.exe

Viber Media Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Viber’. This is installed with Viber.
Publisher:
Viber Media Inc.  (signed and verified)

MD5:
214d0ba83f53d48ac6c9738798f5ebe5

SHA-1:
f6cd420dc1d94eb3b8c6bc84025fa927b4c90487

SHA-256:
fa83a107dc2f017a7ab07f135cdafb779d4fed0924e305ce90ca92251c3d7629

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 6:13:06 PM UTC  (today)

File size:
914.5 KB (936,456 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\viber\viber.exe

Digital Signature
Signed by:
Viber Media Inc.

Authority:
Thawte, Inc.

Valid from:
3/28/2012 1:00:00 AM

Valid to:
3/28/2014 11:59:59 PM

Subject:
CN=Viber Media Inc., OU=DEV, O=Viber Media Inc., L=Panama, S=Panama, C=PA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
73C6D14119B06C7562CA81A8BEFDCED1

File PE Metadata
Compilation timestamp:
12/2/2013 1:12:45 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:WT4C3NjEa/tZPd/qPNnJEG6FwpToWagMHEDtc7yUJ3/fotgROXY1:srL6T6FAToWsEDt/UBotPY

Entry address:
0x919BC

Entry point:
E8, D2, 04, 00, 00, E9, 6B, FD, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 14, 87, 4B, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F4, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 6A, 14, 68, A0, C0, 4A, 00, E8, D7, 01, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89...
 
[+]

Entropy:
6.5320

Code size:
594.5 KB (608,768 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Viber

Command:
"C:\users\{user}\appdata\local\viber\viber.exe" startminimized


Windows Firewall Allowed Program
Name:
C:\Documents and Settings\Agfa 2012\Local Settings\Application Data\Viber\Viber.exe


The file viber.exe has been discovered within the following programs.

Viber  by Viber Media Inc
Publisher's description - “Viber for Windows lets you send free messages and make free calls to other Viber users, on any device and network, in any country! Viber syncs your contacts, messages and call history with your mobile device. All the stickers from your mobile phone, now on your desktop.”
www.viber.com/products/windows
About 3% of users remove it
 
Powered by Should I Remove It?

Scan viber.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.