» vpn-client-2.2.2-release.exe
Overview
Analysis
File Details
Downloads (22)

vpn-client-2.2.2-release.exe

Shrew Soft Inc

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from trello-attachments.s3.amazonaws.com and multiple other hosts.

File name:

Publisher:

Shrew Soft Inc (signed and verified)

MD5:

43e3ef7766e4352583129cf0eec72ab7

SHA-1:

182577786892e619a4b85270fa8d915c71e63c4c

SHA-256:

573b26315d49ab55e10ec39aa092f43ff0a061f3472ad99d3f5f106dadd18c3d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 11:51:48 AM UTC (today)

File size:

3.2 MB (3,346,256 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Common path:

C:\users\{user}\downloads\vpn-client-2.2.2-release.exe

Digital Signature

Signed by:

Shrew Soft Inc

Authority:

VeriSign, Inc.

Valid from:

6/12/2013 2:00:00 AM

Valid to:

7/12/2016 1:59:59 AM

Subject:

CN=Shrew Soft Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Shrew Soft Inc, L=Austin, S=Texas, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

409326507337941BCA2CAD5EEC83EE51

File PE Metadata

Compilation timestamp:

12/5/2009 11:53:18 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

98304:4+5LpcUagH964P5CoiS4Ipk8u2bakpomFBH:4+5tBBH84P8S3ijsa9mf

Entry address:

0x36A0

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 88, A7, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 53, FF, 15, 88, 82, 40, 00, 6A, 08, A3, B8, 63, 42, 00, E8, EE, 2E, 00, 00, A3, 04, 63, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, B0, 0C, 42, 00, FF, 15, 58, 81, 40, 00, 68, 10, A8, 40, 00, 68, 00, 5B, 42, 00, E8, F4, 29, 00, 00, FF, 15, B0, 80, 40, 00, BF, 00, C0, 42, 00, 50, 57, E8, E2, 29, 00, 00... 
[+]

Packer / compiler:

Nullsoft install system v2.x

Code size:

24.5 KB (25,088 bytes)

The file vpn-client-2.2.2-release.exe has been seen being distributed by the following 22 URLs.

https://trello-attachments.s3.amazonaws.com/565c1f0afcb72c9f4b6d4563/565c1f4cc74278390ac5b81d/.../vpn-client-2.2.2-release.exe

https://doc-10-24-docs.googleusercontent.com/docs/securesc/70ohm8sg898lp0fpkbei68ve3hnkrrcd/togs4fu4um6n0a4n9g6inklgqh8bs3vm/1479837600000/.../06257734836071901183/0B5GKeibwx977OW42MEhGRTFuQlU?e=download

http://it.hum.ku.dk/vejledning/workathome/.../vpn222.exe

https://3c-bap.web.de/mail/client/attachment/download/.../;jsessionid=2872C48B80832839CA750C4246EABE16-n3.bap43a

http://download.findmysoft.com/2014/07/.../Shrew-Soft-VPN-Client_Standard-2.2.2.exe

https://doc-0o-3k-docs.googleusercontent.com/docs/securesc/u1kp2svbv6uc2o26cn72ge8m7hp3qela/80ubfr3mgrckvs1g9fs5di67r64sam1t/1453356000000/13993001772240997500/.../0B6XgJetzMCnLZGJHSHF3YzduN0E?e=download&nonce=ufs5id2q4r374&user=06141120453463538503&hash=0eooplgngg882n5mj0vh9krv20savv5i

ftp://ftp.allegronet.co.il/Fattal-VPN/.../vpn-client-2.2.2-release.exe

https://drive.google.com/uc?id=0B6XgJetzMCnLZGJHSHF3YzduN0E&export=download

ftp://10.121.9.111/SOFTWARES/Softwares/vpn client/.../vpn-client-2.2.2-release.exe

https://doc-10-9k-docs.googleusercontent.com/docs/securesc/v511fq63u5gjghali7traiue62f77mac/t2qd2cbmmfusmasm58mkj31fd9dvbljc/1461772800000/.../17993949934775073278/0B8Jv6WM8F0cWRUhQUGlpX2ZWTjQ?e=download

http://shrew-soft-vpn-client.software.informer.com/.../

https://shrew.net/download/.../vpn-client-2.2.2-release.exe

ftp://123.108.43.39/vpn-client-2.2.2-release.exe

http://vpnclient.waverunnernet.nl/Download.aspx?File=vpn-client.exe

ftp://ftp-dmz.weizmann.ac.il/pub/vmop/.../ShrewClient.exe

https://docs.google.com/a/.../uc?authuser=0&id=0B6gH6SxV0w3INEEtdk00eEFKT1E&export=download

https://doc-0c-ak-docs.googleusercontent.com/docs/securesc/ego8m4hjf6m7pvnn7icvho0tl8ote658/f64i0oqpo7dl728vc3cc23c74d7tasb7/1390658400000/.../02020005673653070152/0B59UWpcobNizUXA3cUxINkppQ3c?e=download&h=16653014193614665626&nonce=5ueebuj1nnblq&user=02020005673653070152&hash=edgm00gqokpl5aqdgr58b31q42klp7lt

https://docs.google.com/nonceSigner?nonce=5ueebuj1nnblq&continue=https://doc-0c-ak-docs.googleusercontent.com/docs/securesc/ego8m4hjf6m7pvnn7icvho0tl8ote658/f64i0oqpo7dl728vc3cc23c74d7tasb7/1390658400000/.../02020005673653070152/0B59UWpcobNizUXA3cUxINkppQ3c?e=download&h=16653014193614665626&hash=lt8sjhnmlqk38umr0u62faoiid8cn2m4

https://drive.google.com/uc?id=0B59UWpcobNizUXA3cUxINkppQ3c&export=download

https://wiki.elon.edu/download/attachments/.../vpn-client-2.2.2-release.exe

https://www.shrew.net/download/.../vpn-client-2.2.2-release.exe

Scan vpn-client-2.2.2-release.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.