home

WhatsApp Viewer.exe

WhatsApp Viewer

This is a setup program which is used to install the application.
Product:
WhatsApp Viewer

Version:
1, 6, 0, 0

MD5:
bda8843e79f38250180bd717c9fea662

SHA-1:
a7603c50472b4df7961c1be0d038897c2b280959

SHA-256:
0e22021e574d9555c26892bdff84e3f1fdb1abf831d37040c0397866f7ffc94b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:21:45 AM UTC  (today)

File size:
2 MB (2,059,776 bytes)

Product version:
v1.6

Copyright:
Copyright (C) 2014 Andreas Mausch

Original file name:
WhatsApp Viewer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\whatsapp viewer.exe

File PE Metadata
Compilation timestamp:
6/12/2014 8:23:15 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:Pv1ZtCeJhrGuqxocyGS9rhXwBP2uZ7kD2NztWtlE7u:HPtCeJhrGWcyGS9lq2uZ7kDRlE

Entry address:
0x8243A

Entry point:
E8, 73, 9F, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, C0, C4, 4A, 00, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, C4, C4, 4A, 00, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, F8, 5B, 00, 00, 85, C0, 75, 06, B8, 28, C6, 4A, 00, C3, 83, C0, 08, C3, E8, E5, 5B, 00, 00, 85, C0, 75, 06, B8, 2C, C6, 4A, 00, C3, 83, C0, 0C, C3, 8B, FF, 55, 8B, EC, 56, E8, E2, FF, FF, FF, 8B, 4D, 08...
 
[+]

Code size:
607 KB (621,568 bytes)

The file WhatsApp Viewer.exe has been seen being distributed by the following 11 URLs.

temp:WhatsApp Viewer.exe

https://drive.google.com/uc?id=0ByGSegWz069vNzJSaXRZR3M5b1k&export=download

https://doc-0g-2s-docs.googleusercontent.com/docs/securesc/o017s8rft0pnun9b2437ve80ejfmf65g/5rcs7qrqtcsihj08fmd947sno2rfda6q/1408125600000/14591374474153002169/.../0ByGSegWz069vNzJSaXRZR3M5b1k?e=download&h=16653014193614665626&nonce=vvs7qs073nfvs&user=14162439069055541631&hash=nqieoaihg905gcm9jqeh5gdbks1s41cd

https://docs.google.com/nonceSigner?nonce=vvs7qs073nfvs&continue=https://doc-0g-2s-docs.googleusercontent.com/docs/securesc/o017s8rft0pnun9b2437ve80ejfmf65g/5rcs7qrqtcsihj08fmd947sno2rfda6q/1408125600000/14591374474153002169/.../0ByGSegWz069vNzJSaXRZR3M5b1k?e=download&h=16653014193614665626&hash=f6bt6p8l3ao2h70hequl9kru7m3fnp9d

https://doc-0g-2s-docs.googleusercontent.com/docs/securesc/o017s8rft0pnun9b2437ve80ejfmf65g/5rcs7qrqtcsihj08fmd947sno2rfda6q/1408125600000/14591374474153002169/.../0ByGSegWz069vNzJSaXRZR3M5b1k?h=16653014193614665626&e=download

https://docs.google.com/uc?id=0ByGSegWz069vNzJSaXRZR3M5b1k&export=download&urp=https://docs.google.com/file/.../0ByGSegWz069vNzJSaX&pli=1

https://docs.google.com/uc?id=0ByGSegWz069vNzJSaXRZR3M5b1k&export=download&urp=https://docs.google.com/file/.../0ByGSegWz069vNzJSaX&pli=1&auth=DQAAAJEAAABbwNrl9ssTMxGN7MvSiwFZu02-zxsv-2C744L1FzGwb21FsdL8ffMeIB2hlPt0i7EHS6BZz30FCBcBpCQtk1U9j-GCHmbIjt6H-twT5XAU-QRhFlm509PgoRdDG2QyhimXHJgsvw9aft_NiB9f8s8T4ndjDiwgAdrVhQhtUH-YVXRmAWtecKU_yv3QJK6jxlDk13SPhSwFrjzR1sCmjBz3&authuser=0

https://accounts.google.com/ServiceLogin?service=writely&passive=1209600&continue=https://docs.google.com/uc?id=0ByGSegWz069vNzJSaXRZR3M5b1k&export=download&urp=https://docs.google.com/file/.../0ByGSegWz069vNzJSaX&followup=https://docs.google.com/uc?id=0ByGSegWz069vNzJSaXRZR3M5b1k&export=download&urp=https://docs.google.com/file/.../0ByGSegWz069vNzJSaX&ltmpl=homepage&emr=1&authuser=0

https://www.google.com/accounts/ServiceLogin?service=writely&passive=1209600&continue=https://docs.google.com/uc?id=0ByGSegWz069vNzJSaXRZR3M5b1k&export=download&urp=https://docs.google.com/file/.../0ByGSegWz069vNzJSaX&followup=https://docs.google.com/uc?id=0ByGSegWz069vNzJSaXRZR3M5b1k&export=download&urp=https://docs.google.com/file/.../0ByGSegWz069vNzJSaX&ltmpl=homepage&emr=1&authuser=0

https://docs.google.com/uc?id=0ByGSegWz069vNzJSaXRZR3M5b1k&export=download

https://docs.google.com/uc?authuser=0&id=0ByGSegWz069vNzJSaXRZR3M5b1k&export=download

Scan WhatsApp Viewer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.