vibersetup.exe

Viber

Viber Media S.a.r.l

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dw4.fr.uptodown.com and multiple other hosts.
Publisher:
Viber Media Inc  (signed by Viber Media S.a.r.l)

Product:
Viber

Description:
Viber Install

Version:
3.0.0.134678

MD5:
d2a5ed6286ed8ecee0920b224d8af3a1

SHA-1:
87a2ecf7d6eb7006e1d5fefe69eaac5a27509413

SHA-256:
9f4dd87a10979253de576f3fb2a1619c45458e14672a709b193d0c00f0b10aca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:08:48 AM UTC  (today)

File size:
1.2 MB (1,296,008 bytes)

Product version:
3.0.0.134678

Copyright:
Copyright (c) 2012

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\vibersetup.exe

Digital Signature
Authority:
Thawte, Inc.

Valid from:
5/14/2014 2:00:00 AM

Valid to:
4/28/2016 1:59:59 AM

Subject:
CN=Viber Media S.a.r.l, O=Viber Media S.a.r.l, L=Luxembourg, S=Luxembourg, C=LU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
5B2B01101C2900E34ECB16F78E6B73BF

File PE Metadata
Compilation timestamp:
5/30/2013 10:09:15 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:1GY6g4I1vIqKi13QOSeeLYNV3FFc6+BsE9od/sxLPk0sjBMRWCMFEF:4Y6g42wVkJeWV3jxO9oyTP3zMFEF

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, BC, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 25, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 80, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 8F, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 7D, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29.5 KB (30,208 bytes)

The file vibersetup.exe has been seen being distributed by the following 30 URLs.

http://dw4.fr.uptodown.com/dl/1415099099/.../viber-4-2-2-en-win.exe

http://dw.ru.uptodown.com/dl/1422201120/.../viber-4-2-2-en-win.exe

https://dw.uptodown.com/dwn/41cUHxToapy4HXYMJ6V4IGVcTvXxzUjxDwE0jyZoplB5D4F9fk0sl1E7HkhxIRgd5fKoAx3geoV92_ITQTtQL5PVP_viNhSxxZSabB3Jq0eq9BpTTKDkvwzRS6QTom30/NXcjkcImaenryYNq3rst4CtkWdYuIW3ju00kOzCSz8DThwDo08X4F5-RtEC18etq0teBEBACkXKpVKa81mtE1h6GW3vvtMo2TB4FzOWj4SLFhHRtpvyhizVsUlvA-351/GOwviQtEPoCBdw2AuOpV835csnZ9WbCphKJdiSsah5eLCQNlyqrEp9ud7hzdK8ojrDdN8AQT9kExvEtDvoiBsNTCNOih1Ceq68NM0A2D5pZzqr4rdgPdNiCUVoC90Bpb/.../

http://dw.ar.uptodown.com/dl/1431166816/.../viber-4-2-2-en-win.exe

https://dw.uptodown.com/dwn/dm0eUY3BUacxJmjSISfscMzxs_tc4wbJiCbR7Q-azZZJj8sG_tETxWW7RDa-boc1o4litZ9R3vgGhqS0M-FsXArUrJ3DFGc3gSiFs4LhnPAkgcuDdlStatScY8uBgWfN/M4Pk6ENuxGvilul4QaOKPgis6MVppiYklYg5q7hwBuEwvVJ-KQ0cIagh5TmFW0UElu6Z0DGFba0qJC_HEN3c1e6qbhahkWyG0qo1nrr9XD8irbarQZDeG6cBnN7vtlWq/rI9Lm3ZL-ZNWy7SGkGHiqfUDC1H49MX2Nw-tv9ovo3YQ7-oGMsI-tXEprdr08DqA7EcZE5-x8dCJd3PgUfslohCyDL6iE_AjBqUAAINMhasS9eOjxqALnw_UKXngnf5Y/.../

https://dw.uptodown.com/dwn/PMphzn-mrjI1l4zTmWf1-PT0J6eWJyQDwQm1_Zg3jcxYDlk4U7zokbis2F05tsUbPWk0cvsNcvsaHQV6Ufhi6LeZ2vUEE2oOIJqjovq55Zb54ymXN7ZcM5gnvhk3uFPK/ubq22nWnmb4GGXmbqjKfY58qECVk2GFJeAll0Ad4xdkraJtDIolKZNmpN5ZMXKV55r3zi_KsufsIZpe4ypsVuA2F0FznvihhNzkmdwsWu95owa1KDrK78MCCJjizm_Pa/6-QyOfuhMECZHdOeLEQ2EjNg9_f7J1ZtpoAgtNZ4fTal-66ldWyE3Ijf6_bL3SWy_SKA8tlisZXC7QeQas8X1RRrWiJi39okAgGH7mqSuZIe3GboccUfhZlSj4QaQVXO/.../

http://dw.ar.uptodown.com/dl/1426519137/.../viber-4-2-2-en-win.exe

http://dw.en.uptodown.com/dl/1426705730/.../viber-4-2-2-en-win.exe

http://gsf-cf.softonic.com/87a/2ec/.../ViberSetup.exe

http://10.13.72.100:8000/ViberSetup.exe

Latest 30 of 30 download URLs

Scan vibersetup.exe - Powered by Reason Core Security