openvpn-install-2.3.11-i601-x86_64.exe

OpenVPN Technologies, Inc.

The program is a setup application that uses the Nullsoft Install System installer. The file has been seen being downloaded from swupdate.openvpn.org and multiple other hosts.
Publisher:
OpenVPN Technologies, Inc.  (signed and verified)

MD5:
e8ebb3cc5248e122d137d1f6c29397d6

SHA-1:
ab8359e852e6af7d5df59b92e63ca494c70244cf

SHA-256:
e20192f97e3cb96b8d23444490eef7207d8066e5f5e42e3325c5c49b9b76b850

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:34:30 AM UTC  (today)

File size:
1.8 MB (1,837,808 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Common path:
C:\users\{user}\downloads\openvpn-install-2.3.11-i601-x86_64.exe

Digital Signature
Authority:
DigiCert Inc

Valid from:
10/22/2013 5:00:01 AM

Valid to:
9/2/2016 5:00:00 AM

Subject:
CN="OpenVPN Technologies, Inc.", O="OpenVPN Technologies, Inc.", L=Pleasanton, S=California, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0605823F3E8F0AD9C012646C9E834F38

File PE Metadata
Compilation timestamp:
9/30/2014 2:55:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
49152:l1dHKJhwNl91wTylOvuqTGWxb0zDjlqhevVvUrPNj5CW:b1mqEyIvTCWxk5qhevVvM7

Entry address:
0x4105

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, FF, 15, 74, C3, 44, 00, C7, 04, 24, 01, 80, 00, 00, FF, 15, 58, C4, 44, 00, 53, C7, 04, 24, 00, 00, 00, 00, FF, 15, 98, C4, 44, 00, 56, A3, 30, 3B, 44, 00, C7, 04, 24, 08, 00, 00, 00, E8, 8B, 3B, 00, 00, A3, 8C, 3B, 44, 00, 8D, 85, 84, FE, FF, FF, 57, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, A9, B2, 40, 00, FF, 15, AC, C4, 44, 00, 83, EC, 14, C7, 44, 24, 04, AA, B2, 40, 00, C7...
 
[+]

Entropy:
7.9768  (probably packed)

Code size:
34 KB (34,816 bytes)

The file openvpn-install-2.3.11-i601-x86_64.exe has been seen being distributed by the following 21 URLs.

https://swupdate.openvpn.org/cdn-cgi/.../chk_jschl?jschl_vc=441fba9466cec43d3bc4ecbcb7c013e3&pass=1468314118.887-5cA4ebya6r&jschl_answer=248

https://www.google.com/url?hl=pt-PT&q=https://swupdate.openvpn.org/community/.../openvpn-install-2.3.11-I601-x86_64.exe&source=gmail&ust=1467236065656000&usg=AFQjCNFriiZN6ZWYt-m2qKki5E0rHkCeAw

https://vpn.iiit.ac.in/.../openvpn-install-2.3.11-I601-x86_64.exe

https://zorrovpn.com/static/.../openvpn-install-2.3.11-I601-x86_64.exe

https://swupdate.openvpn.org/cdn-cgi/.../chk_captcha?id=2ad244aeabd41067&g-recaptcha-response=03AHJ_VusSJDv0TrAa59l6wXvAGqB2WX7ik64HXgyaTED7P_MMBFVHMGj6It7elz4cryGFWNpFRZVEFRiuAn4q4e5qZl8guNouySKyAo4IsYx5n3GElz4psJJ1ga7I5TmIPiMYft0jWgxY5Euzna3YGCFafz7aKkXvuNmGD4lr6JF32GMORV7nTPRvpbqQwUue2fo_8rIqUDIDKhzKi7NLs7bgMYmrZWRkhDDwEDMTFJy0HToqDf41R5i3HD0Lo2I-5EBa1RXsu5bBc1zEk6kTJqxFsdlmm-rknDTkN0VdKroODV9c4uyMisathM9c6i4A77ccRhPTcy1OFKpVNecLN7ZloNFcScWLlw0yRQ1EvNai6NHAVh2j2O7WVpYBx-LFKVAP3uYtLLWVWv5bZ-tMxSF8E3hD2i5UOAocdmSLytGUF05iFs5Jj2HSo3tMjZPsl3rJY8y9C24ulVd6gOACufH84uQ5iggI92Zk1RZVIJlaKQKTbjizFY36iM1aWLeghHCG2i5CG6lP_vFg_rmElqpJtMuvY_jb5w053qKUCo2ZML-I8Z_n2ceZi5nhRq-WIgXc7QqUvkgZtq463xMNQ7GznzGSW-YsuJAraltaZ_AoS23NIwfg7c2SaGLRMFSpmvVlBLV9AV-eOgC3w7YKRfmuYI4lpalm9VTMrk2XEtzMmNvXKYg0VtK9R16v5uXFlqE0F0dc2IQocghSmosR4mxU8IoNJpbII5XAWxPI3VaQzv7-Qjj8YUDDYUwtWk8RG8uWzSDQIxY7uP731FO5KorGiTcCI_5tX-pfD6XsifwUyxn9pBUOEkZC5RZD1B4glBuH5cxM69BHD2Bj4bCkhIUFLoUvr7lFmPoE5sRC9kCHUlWyp2tDZYWrtoa36kFVdpsrezfR16

https://swupdate.openvpn.org/cdn-cgi/l/.../xk40v4cFb&jschl_answer=-344

https://swupdate.openvpn.org/cdn-cgi/l/.../AAgQiHu7&jschl_answer=10196220

https://swupdate.openvpn.org/cdn-cgi/.../chk_captcha?id=2c8b65450531040c&g-recaptcha-response=03AHJ_VuvKxPs_f2lbGfxJa2YQe9DDUr8igSkJOXj04ujGaqTZRidky9_-7ZfFjsKWSHmQCBVHF1n_d1cxvP1OP6IN3Y5W_J-mZQLebzCkqTmSZAyTeDVaXNztxHiyh0KV1EV57_3j_DxPzS0oBJLJ8cc8KNJKP1l8FikzH5jldxmaLuooiPOs_mI8w6H24W3R8EpBkQHtp_59H0iQQ7WVx-9NRjEi1px6-W7eARZJLChbNPcfUihVLsCEzmT1iZVMvcU5_0Rz_g1BK40SSKmQi_CXhwcU1RmcGx2KcQfsdjEvHIwSkK6KQwRL1i_Hd5ejuyN2bqSXvb9UmWDmTxlWs_buunIGzsCQdDawnFhyqFo58unbHQgUsVPs-MeMmli8P7iMZg1SNrV1IPuWk6lQyqxP77QiQLfYa0Qc-7d_gH0YPVRZyH-khBza2NtZHNXItbbyPzbveJ92CNiCpLef-OYAeSdXQrHaxAuNjqtnVet8d1AyZkBGS1nUMIRoo_cKvdeD7F9YtS3m0OQDQQ36fBfPq3L7_DS9yV06RERjs8jV9ec9lfpQ-cr75dXp9LC6kXS7eLmwDR9pKfG7aUncd_D_bFP9jxmX-pJRnc_F5o345Hgi2WK2jTOcIl0CYoclkq6MnMgUwrs4r_7-ClH-gyVCuvJA0GgeHUerrioonCAND-RpO23a9kcagomxe6UqUxqpY_D5Wd6dwvYLFiBgGRLT6OVTA4ykkaIP7fXY7gMuhzWW6nJqz4Wpp0zAjXMJIG4amoYNFiYpzgc_RFV8aWBW17O9Xa0foin-WRF3EqrLcnnkj3LLTi8Gh0vu2aXl9qVkaxC_YxMkhpCghgXnlA-j_fWby2AlBmW8gowSvXaIkXuNWY6udatK-QvLzbAqv2cOJqeXtl

https://docs.google.com/uc?id=0BzFerciX3VI2Nl9DSWZqYTd6WmM&export=download

http://build.openvpn.net/downloads/.../openvpn-install-2.3.11-I601-x86_64.exe

https://swupdate.openvpn.org/cdn-cgi/.../chk_captcha?id=2b47558ddbba21c2&g-recaptcha-response=03AHJ_VusLdWRaZykZr6efJkFqtWBhJo7v17XEQCA11hCfHdTZpRxtmif2zivF45INc_J4563B-xxPxKy_iWBmFny-gl-NY_D7rd_A3q_Plg3i1xER376R8G3QUywH-ZPEhphiA75_jbAXwYX5n2gpxZWSxPy37zHaoCK_6PeHdtOr3B3qzUJ-kBbyblikt8TJGRILWds68Wr_MO3wKHm1f2C_lSHvXdUn2qcfIrB9b1vBUwGxOdj3TH0bOwfFMqhnyMiDc_RLvRdSe_HUF8M8m5hmehPqLHOf-7ZPreaDeVdGJoPZu2tKQBz9naWS1mS539z3O2E6aLUodWPct7Y5K_4z0MMmDsSCHFRTFxdNWTSXv9E0JUqPK_RG4TTl_sbm81th0ZUujHG1D30QpgNJOmngOweTMoXDuSUQg-iiThESpXHMGwzkc0NIDspiplrgm6hxslMN0n62slscF83VEIVn5x1q3XKRztcyeXYT8doCzmkbxixEXNoEq5L17-soFuXQmfGW8Xm7nwzM71LBJclsxxsxLFGLeJI46V9O53nrON_K1YWAmMqYrX_xuJQ-bE9Yy2hgg2GHZ9SQFuyz0FC31Cf3c8vqHy58A5XE1sjXG894XXukCw0dkLSLE6wkNFUqiivDOM6VabeX-k_vsVqINZNu3b4YuP-Tv69hvwMgjokMUFlfTu-kXZwKCDdh4p4hPq2nDw4vkp8tCknt2H7bQ5w15bh8Vfltt7Qgdo0oMkNYmtaeBUnx3bpJF76eAIO3PkHFR7lTVdOkLbYek6YUlvuZXHmrJT1063_-8tRNAj9pOjz_a0CNSCNvF0NotDFKWRbVwUrnrP3uwmMGaQi6Sr7-5NHbO7iX96t17ultw_qaRM9W5GE1or9l1VDmFyCaxV9jJQ

http://www.th-vpn.com/.../openvpn-install-2.3.11-I601-x86_64.exe

http://78.129.159.148/.../OpenVPN64.exe

https://www.th-vpn.com/.../openvpn-install-2.3.11-I601-x86_64.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=86ab6f66c8bee549dc4c54bdcf231e2c&file=1

http://swupdate.openvpn.org/community/.../openvpn-install-2.3.11-I601-x86_64.exe

Scan openvpn-install-2.3.11-i601-x86_64.exe - Powered by Reason Core Security