home

ventrilo-2.1.4-windows-i386.exe

Flagship Industries, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from www25.zippyshare.com and multiple other hosts.
Publisher:
Flagship Industries, Inc.

Description:
Ventrilo

Version:
2.1.4

MD5:
08e6b7d81e5faf8cb9d69e7931de66d5

SHA-1:
ef6a1cfd424947bf0475d845fdc28df415238a83

SHA-256:
c668f66b44b92e3aa541ab4d577b3996c0002926cb38d15f841310057bca5ffd

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/2/2024 5:35:34 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Paked
1.3.0.4959

Malwarebytes
Trojan.Dropper
v2014.09.19.05

File size:
1.3 MB (1,336,832 bytes)

Copyright:
Flagship Industries, Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
11/21/2003 7:16:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

CTPH (ssdeep):
24576:XMFNdAsatZ4CdC3nrwE8KbOeg1p9CdQJZmKkOfN4:XyXSFdgrQjYdcmKRf

Entry address:
0x39E0

Entry point:
81, EC, 20, 0F, 00, 00, 56, 57, 6A, 04, FF, 15, 0C, 61, 40, 00, 33, FF, 89, 7C, 24, 40, 89, 7C, 24, 24, 89, 7C, 24, 20, 89, 7C, 24, 28, 89, 7C, 24, 1C, FF, 15, A4, 60, 40, 00, 8A, 08, 80, F9, 22, 89, 44, 24, 30, 75, 2A, EB, 05, 80, F9, 22, 74, 10, 40, 8A, 08, 84, C9, 89, 44, 24, 30, 75, F0, 80, F9, 22, 75, 17, 40, 89, 44, 24, 30, EB, 10, 80, F9, 20, 74, 10, 40, 8A, 08, 89, 44, 24, 30, 84, C9, 75, F0, 80, 38, 20, 75, 0A, 40, 80, 38, 20, 74, FA, 89, 44, 24, 30, 8A, 10, 80, FA, 2F, 74, 1B, 8B, C8, EB, 08, 80...
 
[+]

Code size:
19.5 KB (19,968 bytes)

The file ventrilo-2.1.4-windows-i386.exe has been seen being distributed by the following 16 URLs.

http://www25.zippyshare.com/d/22106360/.../ventrilo-2.1.4-Windows-i386.exe

http://revpx28.chomikuj.pl/.../File.aspx?id=2933&vid=302730137&tk=1505509&t=634745912799676656&d=60&k=1350265&name=ventrilo-2.1.4-Windows-i386.exe&loc=PL

http://s6918.chomikuj.pl/File.aspx?e=YA5XO4w0AGpiL6FH-fHNII2UfjPlfszep5X_RF17LS1fFFA1mXZvi2B6jOuJjUFR6uQH6hthO4gTYO1swVyuDu_lWcaHFvMHM6-dK_3M3nSjciET0Hn2f-Zgi9PkO4bBP4oqjmOZNiBbvbXOSbGkYTTqimNb9g3X67H_Q-18d7k&pv=2

https://mega.co.nz/temporary/.../7h42xCrJ

http://s10013.chomikuj.pl/File.aspx?e=YA5XO4w0AGpiL6FH-fHNIJjFJdzfyrAXcM02Nk_lIMhlkQ2u_Nw4yHyGyKF9_ZD60WVq_NUphheY1GUmBX0_PIHRekx4t3gC4U8EvNAXrrpdeuV5s_rKtQhZPL86KfPXpSZOvmZBEihbOVOv66prz5j7KiBNR1dDIWc_CE897jc&pv=2

http://s6847.chomikuj.pl/File.aspx?e=7XW0-cZoTksFs_kuaZZV6RnhOoYXtxW6_6j21fmjNRzJ314C8VA4hCm4S1332PU6UcvKc1wzvios5u6Fm3ydajU4cFy3TrwikjqtlY6HYc7eAOjkLB7a9DS9tWUnX2RJu_VWaLmyT9akpXyO2zLS4Hl1Xg2Vl2QIBDy0KzyjGX8&pv=2

http://www.data.ventrilo2.pl/.../ventrilo-2.1.4-Windows-i386.exe

http://s10013.chomikuj.pl/File.aspx?e=YA5XO4w0AGpiL6FH-fHNIMrS8gcLurqtwscTfHyxc7Z5E8TE3k4v_SHsRjgwV5YxcdV7YIbq71MmudYXydjcOikzfwWweDl_F9ZvFXS6s1eqDzY6q-4PcjSGakaQPG1o6ZhFFwyEeOfPqZjQWCTD9vIpwP88O_vV5uKOzoFZ4vw&pv=2

http://s6918.chomikuj.pl/File.aspx?e=YA5XO4w0AGpiL6FH-fHNIDHg9BYkyhCg5EPFz030zQ3S9ZPw00vVUyVLFKbFYUtKhYoQil9kUDnQ9ASKyrpQG2BTzfpF8xJptQwETBAa2rbJGZneT63AcCv13pcMpXhjPMJnmOATzBQ8yflTTp7SqSUwUDJuyMs9WlxYKinOXNw&pv=2

http://memsoria.pl/.../ventrilo-2.1.4-Windows.exe

http://openka.net/.../ventrilo-2.1.4-Windows.exe

http://dplus.softonic.pl/free-download/.../ventrilo-2.1.4-Windows-i386.exe

http://dinera.net/.../ventrilo-2.1.4-Windows.exe

http://www.progames.pl/download/.../221775

http://simsonots.eu/.../ventrilo-2.1.4-Windows.exe

http://s10013.chomikuj.pl/File.aspx?e=YA5XO4w0AGpiL6FH-fHNIPZ0_6UMuFwcfY46Tn_6BMCO6Uast6kYg53vQfygQpFUlH9Tjy1pYYW-GXPJD-UAP7XXUIpjC4jpTPYxOCOFl1TE-n8UGXldJfCvVYcv-OG3YJ2xopVs2vfgn0eOOSXXj_qixLJoqH9uI4dtEVoq7y0&pv=2

Scan ventrilo-2.1.4-windows-i386.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.