home

vibersetup.exe

Viber

Viber Media Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from letoltes.szoftverbazis.hu and multiple other hosts.
Publisher:
Viber Media Inc  (signed by Viber Media Inc.)

Product:
Viber

Description:
Viber Install

Version:
3.0.0.132799

MD5:
b306a96daa7a38e3e8e1fd3bfb4ab1ca

SHA-1:
41587e1e109a5775e15a3c8eee7da709d4e2977f

SHA-256:
c87ae3eb6dc70cadf17e16fb4a346833c0ccd40d2ae220593da55b17f8dd8dbd

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/25/2024 12:09:25 PM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.Downware.crewao
0.28.0.57029

Rising Antivirus
PE:Trojan.Dropper!6.1BE
23.00.65.131217

File size:
1.2 MB (1,237,920 bytes)

Product version:
3.0.0.132799

Copyright:
Copyright (c) 2012

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Digital Signature
Signed by:
Viber Media Inc.

Authority:
Thawte, Inc.

Valid from:
3/28/2012 2:00:00 AM

Valid to:
3/29/2014 12:59:59 AM

Subject:
CN=Viber Media Inc., OU=DEV, O=Viber Media Inc., L=Panama, S=Panama, C=PA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
73C6D14119B06C7562CA81A8BEFDCED1

File PE Metadata
Compilation timestamp:
4/10/2010 2:19:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:/zZsY6g4I17AwwLzbvN4G5dpiO+JRggc5OoGDqJ3ZykXfLz17aH:/+Y6g42pwLzzN4G5GO2egxBDqFZy631y

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

The file vibersetup.exe has been seen being distributed by the following 39 URLs.

http://letoltes.szoftverbazis.hu/kvnk34FyVemWmGgojoExAw/1485844990/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/f_vKvEroigmJ5bjdNH_SHw/1458746128/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/nr1CGfk3FHru7IU1MHSEgQ/1482864520/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/Sef3Mg3ZIyYDSQMhBGdfiA/1453230041/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/xCk5PC4CMREW_qIpvWOmfw/1466675799/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/uFThxX7FG0JuUzw72bB9og/1440837639/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/q7TUbdVAAQJcX8NXpdEIIA/1448895666/.../ViberSetup.exe

http://static.lhp.hu/letoltokozpont.hu/programok/.../ViberSetup.exe

http://computest.ru/.../vibersetup.exe

http://letoltes.szoftverbazis.hu/8GaOLX9f9_QMzFEANrILgA/1460140265/.../ViberSetup.exe

http://viber.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPkyA8Y74Uvmh fTtY7pUIyLLVFzGIioS7lEPo2PUs9GRIuMnakQRNxDTHOFQPZbBKGJu/CjDbAmSovFmxHBKTO6/qzg3UYsKf/.../4AyUd635XRYBONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

http://letoltes.szoftverbazis.hu/bNeNjSdGXFB5ZhxT6TQRHw/1444913080/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/da33c5857ecb2f00caf2a4724ade888a3f57f189/51d16eb0/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/ilyZl-EaYirNd82KX-H0vg/1475134581/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/FNt7FPU6Gsfkh4QuuDVqzg/1456842659/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/6yQ3OnYN2iniuTEywSU-1A/1437033393/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/J5sAsWmPQfiLWleDItX1pg/1457283742/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/zAceySC91fsVZAeZTS-IeA/1470764412/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/gI6ez0EVR67yUoEzw6ojJg/1446397790/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/h_GogEL_Y9PHEYhFfJKY_A/1471100385/.../ViberSetup.exe

http://www.techtudo.com.br/_/software/.../download

http://letoltes.szoftverbazis.hu/z6-Bk1Hw7S12Ek5IEQWXsg/1468152824/.../ViberSetup.exe

http://s6102.chomikuj.pl/File.aspx?e=eFGXkzNGWKHDAqMfxe8FtjMtjWYkUq1eKlEiQDdQ4QFPCn_biVky0wlidhe0yX7ChPFiGIbnLvF9SvCL-osbg4gJ2MI4G-A0zVYpuvMk3YBTtBYTFZxD99jkp1Dj3k2vmORReKEHPVPN87gQw8G3gw&pv=2

http://letoltes.szoftverbazis.hu/MSOt1vKAmnM1Bf2btVnO0Q/1440503761/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/o3LmzMPn2OZlGhp67TkPAg/1451834984/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/O8HG-LcPoLlv6ImP8pP_2w/1407083187/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/gsMTkmWAAw8BTrGDEQvU6w/1455885207/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/kdW6ArO9a2W1wOLtaUmicw/1464984547/.../ViberSetup.exe

http://letoltes.szoftverbazis.hu/tzzC0hsrIv09MZqI6yKGUQ/1463925514/.../ViberSetup.exe

http://download.cdn.viber.com/desktop/.../ViberSetup.exe

Latest 30 of 39 download URLs

Scan vibersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.