318b16bcf20c1fe089cf34941441a2908b159e3890b48b3fda7b49b0a2f7999e

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/04/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VpnInstaller.exe
Size 6.7MB
Sample260415-pg7xfsdx2m
SHA256 318b16bcf20c1fe089cf34941441a2908b159e3890b48b3fda7b49b0a2f7999e
MD5 3ac52ca5386234239ae8a00de39db7fc
SHA1 237a9e1926b2a8722fc8dd82fd46ef14631bca10
SHA512 14e2627305c2f8465da72d401e6b1fd92eafd46a775bb5feff62219b8306a417b7d8dee03ed5ee754e9464e1764f2c7252bed48d5797577f71deb346f8f66265
SSDEEP 98304:94K1aSBRkqjhbS6Cv2fGW+qE9ZsPWIRpYqHi52vKzPYb6vEHvmPceDCt8:9ZakvJCefGW+FgRubRgeMPdeX
TLSH
T1666633CF07A0A12FCF2B1FB7545F0947EEE32F290A62814C4AAD909D6C5375D6198B93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence spyware stealer

Malware Config

Signatures

Sets service image path in registry 3 TTPs 1 IoCs

This determines the executable launched when a service starts. It can be used to establish persistence.

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Windows Service

T1543.003

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\AviraPhantomVPN\ImagePath = "\"C:\\Program Files (x86)\\Avira\\VPN\\Avira.VpnService.exe\""	VpnInstaller.exe

Checks for any installed AV software in registry 1 TTPs 2 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Software\WOW6432Node\Avira\Security	VpnInstaller.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Avira\Security\Benchmark	Avira.VpnService.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\st.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\vu.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\views\directives\settings.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\views\directives\start_diagnostic_data.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Templates\TemplateVpn2.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Avira.Acp.Common.dll	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\nl.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\tg.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Templates\images\FTU-gfx-screen-1.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Templates\images\FTU-gfx-screen-2.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\as.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\do.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\lr.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\pa.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\views\directives\email_confirmation.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\de-DE\Avira.VpnService.resources.dll	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\mz.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\pt.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Templates\images\checkmark.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Avira.Common.Core.dll	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\wifi-connected-light.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\purchase\[email protected]	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\af.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\bw.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\cu.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\ir.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\kr.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\purchase\all_devices_Black.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\cf.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\gl.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\sv.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\um.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\views\directives\display_settings.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\views\directives\keychain.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Templates\ftu.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\aw.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\views\directives\waiting_window.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Templates\TemplateWarningNoHint.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Templates\images\FTU-vpn-logo.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\tr-TR\Avira.VpnService.resources.dll	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Serilog.Enrichers.Process.dll	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\tv.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\ja-JP\Avira.VpnService.resources.dll	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\Defaults\ProductSettings.json	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\cx.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\cy.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\me.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\us.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\vc.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\JWT.dll	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\bo.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\ke.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\sk.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\hu.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\fonts\ionicons.woff	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\bz.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\nf.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\views\directives\confirm_sent_data.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\views\directives\theme_selection.html	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\pt-BR\Avira.VpnService.resources.dll	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\cm.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\de.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\App\images\png\regions\gb.png	VpnInstaller.exe
File created	C:\Program Files (x86)\Avira\VPN\OpenVpn\phantomvpn.exe	VpnInstaller.exe

Executes dropped EXE 3 IoCs

pid	Process
2832	Avira.VpnService.exe
4336	Avira.WebAppHost.exe
4352	Avira.NetworkBlocker.exe

Launches sc.exe 1 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
2440	sc.exe

Loads dropped DLL 16 IoCs

pid	Process
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VpnInstaller.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Avira.NetworkBlocker.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Avira.VpnService.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	Avira.VpnService.exe

Modifies data under HKEY_USERS 6 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0"	Avira.VpnService.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections	Avira.VpnService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\	Avira.VpnService.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1"	Avira.VpnService.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1"	Avira.VpnService.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1"	Avira.VpnService.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\{80b8c23c-16e0-4cd8-bbc3-cecec9a78b79}	Avira.VpnService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\{80b8c23c-16e0-4cd8-bbc3-cecec9a78b79}\vpnclient = "a72f0e53d3cb43109d326d8621590d2fbfd60f8b"	Avira.VpnService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\{80b8c23c-16e0-4cd8-bbc3-cecec9a78b79}\telemetry = "8b077356c0274b9985641ea225a3503e94b46cba"	Avira.VpnService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\{80b8c23c-16e0-4cd8-bbc3-cecec9a78b79}\machine = "33b54795d79b4ce1aa411f1e1b73bba4ea954156"	Avira.VpnService.exe

Suspicious behavior: EnumeratesProcesses 25 IoCs

pid	Process
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
4028	VpnInstaller.exe
2832	Avira.VpnService.exe
4336	Avira.WebAppHost.exe
2832	Avira.VpnService.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2832	Avira.VpnService.exe
Token: SeDebugPrivilege	4336	Avira.WebAppHost.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4028 wrote to memory of 2440	4028	VpnInstaller.exe	86
PID 2832 wrote to memory of 4352	2832	Avira.VpnService.exe	93

C:\Users\Admin\AppData\Local\Temp\VpnInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\VpnInstaller.exe"
1⤵
- Sets service image path in registry
- Checks for any installed AV software in registry
- Drops file in Program Files directory
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4028
- C:\Windows\SysWOW64\sc.exe
  "C:\Windows\system32\sc.exe" failure AviraPhantomVPN reset= 86400 actions= restart/5000/restart/10000//1000
  2⤵
  - Launches sc.exe
  - System Location Discovery: System Language Discovery
  PID:2440

C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
"C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe"
1⤵
- Checks for any installed AV software in registry
- Executes dropped EXE
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2832
- C:\Program Files (x86)\Avira\VPN\Avira.NetworkBlocker.exe
  "C:\Program Files (x86)\Avira\VPN\Avira.NetworkBlocker.exe" delete
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:4352

C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe
"C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe" /migrateSettings
1⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4336

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

no.png

Path C:\Program Files (x86)\Avira\VPN\App\images\png\regions\no.png
Size 743B
SHA256 3cf52e677d7f7be201cbf6e3ec56ed1f48b95c47e5969ef2c2510e270133c4f0
MD5 d3b58f803a9a01a59210dd673998a229
SHA1 6caddb6c8e749e9c5b786a3984bb7bdbba2bafc5
SHA512 88aade4affd629926e473df3d26ecca5ba49c4b77da9343e58729cf3a2b1cd0b9d27d9e019018455bffd18b7a7570a5c14d918eff46deecc5821903f76094988
TLSH
T15501B5C7A78024A68B3ECA3B40066A23976B28186E26100C5128A9BD02C21ED3D50BFC
MD5 SHA1 SHA512 TLSH

Submit Download

Avira.Acp.Common.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.Acp.Common.dll
Size 17KB
SHA256 b738ee32b11a58b74686ccd551d0d33b58c3b335d9ba8998ba291c805340c455
MD5 c24b22b9cf851bcafac9f095dc845f7e
SHA1 8eab085e3dfe6b6799c66f576697fe7a17c9afbf
SHA512 dbefb4c2183068c8d61c29b5594cd676ac8e14176b961ad326190afe3f3710a6564c67507af7f32c31e46f279ffc97a3640f8648fb02eb0a846f5e28548349c0
SSDEEP 384:GFIAHpwK37Ts5x6xldei2WSx7bLkPZLqi:GFjRgJAmbLUd
TLSH
T1A0727D873F346523EE8B4E38F0C69BA31C71B2B1AF62458754318649EC177E22B2556F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.Acp.Resources.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.Acp.Resources.dll
Size 54KB
SHA256 839942ba4c0e36ad27355f65acf6520bbd6fa0967bfd3d9d6ddec520ca4fc3c9
MD5 318f261f2875d1b6ad27afd9aebce1da
SHA1 6230901e4b145e7ea66160e9726951931a00b7de
SHA512 379c89f2d165a1551c459984f3aeec556499c2cc7346f4a346d5b651f5a729c44b0f84c68b48f120f8c5ddaba0bfa2895421acb7261f266dd5743ce8fa6a6c80
SSDEEP 768:X+8ePSjZKaZXrcIA0wPmC2Nx4aeKDFTaYix0PZAMxkEw:X+8TBJrcIA9atDFTa7xsBx8
TLSH
T1B843D822C778C76DD71E0A32B4E04A3A45B1D24F3161DAE5CB60F45B3F627817E1A8B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.Acp.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.Acp.dll
Size 154KB
SHA256 19f6be72656bc0df0ab8849ed1e87f92af256228a569fcc330c7d836527176c2
MD5 dac7dfa8663bcc02569c8add3e8b95b4
SHA1 2780e12bc08348f1a9fdfebec1022e8250ad52c3
SHA512 d2a80dd7eefab588a2ce8bd894fb9e7dade29ae6993b78cce3a82f5dc3e0fbe74f862c90db69819cfc3e0e26a05be995a8b765c5ddc28be2a34ea4c9f7f52b33
SSDEEP 3072:qEVpdvBxV2NuMJ9eiqO4I/rwHviUoR+Tc37cNtfX6KmhbZJVeGeq1Vlf:TLvzE9WTSVlf
TLSH
T17BF36D13175C8B26DBFF097AF161012287F1E117B162E79A8D80B8ED1DABB41D9207B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.Common.Acp.AppClient.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.Common.Acp.AppClient.dll
Size 45KB
SHA256 61a6f383852f1c2e9699c6c8c4e77580eb102d3c8ff653c27179b36d364b4ba0
MD5 8aa11811eada16cee053b782116005d8
SHA1 6e71a5a862833db0fd129c13c06af7da510553be
SHA512 1d0759149bf3acba6968cd312a27333a6895e8ea0ad9c59291f33a31f7852461e730254b67e2be304f826c3b6fb38385def622634e2801b747a6118ba5bc8c58
SSDEEP 768:4koqab4+w581Qs8XeC9bP/dwL+lXf3oqAmbLVI:K94+w58rieebNw6lXf3hVNI
TLSH
T1C1237D073B4C8B23CF9F0F3DB49155530BB2E2566913E79698CCF5C699677A01A203AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.Common.Core.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.Common.Core.dll
Size 69KB
SHA256 6c5b87fad485e497d5e197a7b13da27ea4facde695cd05dd6edef2e4ae3247ad
MD5 7eeebd2e69833aaa313e5a170b58de8d
SHA1 58e62e1ac5c12fca617cc83f3bb16c69e29cb09a
SHA512 8090040cd386a1846b7abf5df9c13a8dbfac87e2438e7f37727d6d170a9972a91ff7e90a9eae34e9491bdd3aed497eee13ef0ef41fa70bb3b6316eb55fedbaa0
SSDEEP 1536:+SEJXarOmeCVwzM8cGqnCXgU3n3WjHaSVi:+SE5T8VwzM5GO8gU33WjNVi
TLSH
T12A636C0337449527DF8E8BB9B0A347964B72914BA6D3EF4A5DC892E95CF33C00A152E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.Messaging.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.Messaging.dll
Size 48KB
SHA256 18a1c592f221731a710d8a9ef97d811a78411897b14c219206cebb0f78b550f7
MD5 7e0a01c3967aa8c2259fed901b86678a
SHA1 c95a0168bb3ac9fba4a60d50ada9e44aba8db6cd
SHA512 ff85f6c13c8787223daffc6591202930843ebe0627c8ecbf42590a9545655b046fe9915173cd5077cfb4db35196091c920ac21856a14fa5b8cc51a9798796c77
SSDEEP 768:pok8aLIW0dxlPVXr76bvm2Cg94DlS4xpK6m9qAmbLRW:pltsHDng9CS4j49qV5W
TLSH
T1F1235B0627648B73CBEE0978B8A112110FF1E1566812F3895DCCA4E69E537A61F913FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.NetworkBlocker.exe

Path C:\Program Files (x86)\Avira\VPN\Avira.NetworkBlocker.exe
Size 231KB
SHA256 c69d3dee3e0c26dcaeb59ba40f7d8bbdbbfdb1444307d59add27de20f976240b
MD5 1ab0ca2a5c0cae27c76e73e3f7d9d81d
SHA1 55b15be11770965f795dc1079b587fac1437c5e3
SHA512 05010db1ecff9d418d09e64ca020db7d1872ed4a9eb41832e8edc30ddf531b8fa9035b8d92d251d5f095688db65811cc336f43d0e76e3192269409d5da618804
SSDEEP 3072:7vAwWTowg2EfMX5R2c+hvekD2/S/zJZ2nBulgc8lvjiVsDKZTTqZ68PpV3:7vAwWTYjfu2Mg2GzJ4Bjc83M8PpV3
TLSH
T1CB347C11B9D1C073DA63093598F4DB795E3EFC610FA1A9C7A3940FBA8E206C19B3561B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.VPN.Acp.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.VPN.Acp.dll
Size 33KB
SHA256 73d94e738bd4f5b726cda5797a597a17d5533c773a513b6c219f95585ce78c2f
MD5 5cae508a3bd51d93818bb94311c1ad0a
SHA1 99469d03a0ee7bba4c023111a8f27121f499c764
SHA512 7baed3b97fbbfb1c5f1223a4e2671e1fb49fff367836f72c356d0357fae48ed085e96a05ca6822ac8957b1a387b9b5dbbc7d1c44582cc1478c12af2feaf4a8d3
SSDEEP 384:8Stn6MsNeqrEK6FR9X0I7XlWwVp7ty3xPRVEEtyahnYmHWqOpwK37T66yldei2WW:8GllXK6T9kI5bztiIodirAmbLzm0
TLSH
T1A0F26B4A2B3CD73EDFAA0A7DF3A052A30672A1A63933E594CE54B18A5D33741360457F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.VPN.Core.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.VPN.Core.dll
Size 155KB
SHA256 6e14e9ee345b6eccee23ff7978f07cfaeb741f7ac2804d959023425900edb237
MD5 f673b6579e903c75ee5c4fbd456bfb97
SHA1 52d3ad637d32a6225cb607215e0a9e4138a29ebe
SHA512 7ac9637d0d3463ace82d416f4a182ba9fe58ab87c8a6923ab7817eb15f01ac25bbce6086de793dedf51d73df5cd4ce842cae4d3468d6d38be5ad73ac50506e99
SSDEEP 3072:D9yza0F3YjTBmJmcQ9WjPprzWHGkFnWWJnrJnWssGuqYHblGTHL+FQTB5Vu:D9yza0F3YaNQ9eprnkFnWWJnrJnWsp6T
TLSH
T17DF35C2437E8451AE3FF6F7CA8F012128FBAF547A513E78E168446DD19637809A502FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.VPN.NotifierClient.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.VPN.NotifierClient.dll
Size 29KB
SHA256 70c45706580a79e9789a7030e7a971995bba18930aaf34838f16f72cb66ecbed
MD5 228b9fe74325e58c34710366e475fada
SHA1 6f3fb245be9ab17095bb0010b2b0aa1939226caa
SHA512 1af892623eb7daeaa28b368e6cbd8e413643a4743492de1e9a634ae997303ff3388a28698b68ca31200b027007d174b86504264c423f7ed62254300700fe30c3
SSDEEP 768:YVVlLNEykX+tg5ABAeYoKUGF511AmbLEs:+lLRkX1o7QVVcs
TLSH
T18DD27D133B3C9717CF970A38B0E257A20A7271597933D5868B60A54F2E5BB9107057BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.VPN.OeConnector.dll

Path C:\Program Files (x86)\Avira\VPN\Avira.VPN.OeConnector.dll
Size 42KB
SHA256 f6ee56ba04ca40f4b09cc7711ae7919fa7fc64c1791d31a393324c91e62114b7
MD5 5b65e52f74294f1e779519af0157e88f
SHA1 fa012e25c163c0b0983f31bded475122834cb6b9
SHA512 a01a60227bbe84831bf91210b059729bbde051bb45807568bb21ccb62414e3011a51b646402d52121c601463407ece96114fbc24989dd9ddf5119a3958615d36
SSDEEP 768:RnSQyogWae/A06d26MCcstbOteXJNc5+AmbLv:RnS6gWaZTd2ucstateZNc5+V3
TLSH
T130134C0A37BC4513EABF1E7DB8B046120F71BA53FD15E6C9688898DD48A33914A113BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.VpnService.exe

Path C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
Size 394KB
SHA256 f2162507b812680c842d4f14fd35ebc89cb509450e2d431a049bc9a7b7719c1e
MD5 1415cacd7cccfda2893bcd33a568b30c
SHA1 baffb88f693f358438d46287e7eda0291093e7d9
SHA512 375c142ff32d37395fdfaa82a8686967c645371f09e1a845c8c14209abec84be87dace143cf3a762f7fe382b6e31dc2eb0d217f036d03587313a7c67dafb8ae3
SSDEEP 6144:AKRtRYZBEwSVJXmsH4d6K8XbOpnddZ8mnu6iKgRFtMVK:A8t2y9cNAKMFtMVK
TLSH
T19684174263E5891AE6FF4B3CAC2642108E77FD03DC2AE6CD5B81399E09B2740991577F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.VpnService.exe.config

Path C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe.config
Size 7KB
SHA256 26609d9d2352ce7569cb7771270e0f926eefaa86d7e92650f753a706db512ebb
MD5 ec3114cb3aee3661babc8b297546df63
SHA1 287fbdfa164b5aaff317138eb2b1ae0d3f431428
SHA512 0efd43fe15f6594d2c715b1280f02fb99354dc8be8abebf728cbdb234135e98c5917e54061bfeda84619ef9aa1e8248f4a8fd2db51d037ef10feb06ca0cd63de
SSDEEP 96:2eDibrDiImWH2kZAuuaxzzr1AsfrQw3ZzYIiAsN/s3xfs3sbtAscdVT7cZMPS7+K:2eObrOKQXu/HZ/HH1rLG+N
TLSH
T1EBE12A0C72CCBF6D06426637EA3122D1947FEE231579A0F468FE717365508DA06B2BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.WebAppHost.exe

Path C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe
Size 824KB
SHA256 1139a8c5b872b774f23fc6b0f9c6a366f41f3fbe1e95703cb6c65cd03c37005e
MD5 44ce5d73b58310aec535b79ff39e1174
SHA1 c3e7659e4e23ab34e341e68460c607ae479d95f5
SHA512 0cf605ffbf67c593be3ae4458250b04296103037696a6dcef1c9fd43aa7543524c7a337e06703577d8c0c96c36d9bac3014c216067f72df8b8aa0b7445de5f6a
SSDEEP 3072:huBm5sKpqFZOUZIeX/j9FCd4XgKSv9td49gKBv97jEiuV3:8QCKp+Zjj8WgNFjQgWF8iuV3
TLSH
T1D7055C019B63D407C88C09FCF85251FEAB969CCAF91F668352C03FA535BB2E530955EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.WebAppHost.exe.config

Path C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe.config
Size 2KB
SHA256 d2d75be243f2985bce5cda333b827429509330fe5a3b4d3e2812c42394f870c0
MD5 3719d4b02d74f27c3445dd0f4e34dd1c
SHA1 7d3e2236ad467432a44f0fe7be97bf5380eb3f57
SHA512 8cd6317e979b9d26f8840fefc7af7a2ea28979da62ad36801271c9a241004d71f7d136fd86f7880d4eae4295ea6bf3e3a2174d3fee8fa98edf69736ba84364a1
TLSH
T10951EE14729C7FAE0B421A73AD3656C1867FCF762878116CA0BE727BA6114CB13523B5
MD5 SHA1 SHA512 TLSH

Submit Download

ProductSettings.json

Path C:\Program Files (x86)\Avira\VPN\Defaults\ProductSettings.json
Size 1KB
SHA256 7e84e38c4b147fa13e871249a9986c4621176ed0afc88c999901e354f603d096
MD5 f9eb282786f0c1d27f9f6ae8b448d4d1
SHA1 df4f115df8a7dc8ffc2d7dbdd9953170cb0f8b32
SHA512 db8a15d8b7b830dd63819eea73aa160accee27dca61a4b9b76d30f9b4161d28307c47d1f412faad9f92d2b77c17832226c16e8db0bb1d413444de1e918692753
TLSH
T1BF21EFDFF1504E779379C2EB497182A2F902B3AF601514CFB470185D5F70C1631D616A
MD5 SHA1 SHA512 TLSH

Submit Download

Messaging.dll

Path C:\Program Files (x86)\Avira\VPN\Messaging.dll
Size 38KB
SHA256 2dabccb49edd4ea3c6fd585088c4c51a0c0d3bb2fa69e9aef91c0eef486a5de5
MD5 7d702aaf87d858bdae0bf9f9d4200f3d
SHA1 b3ca2fabdcdd34e81ddfa5cca206dced9a04c05a
SHA512 90c7d284295401f7ee0054565bbd23eb1fe24d9000cfc4ceb8e0253962d475d14c0414eea8ce1c6992703083888175d03086ab5718b5e1909d574e4d4d18f600
SSDEEP 768:GijhpNDxbofroiWtbHrskOj0GYBrLDPOAmbLv:GGhpNFbofkLHrskOjf6rvPOV3
TLSH
T1CD037D052B7496B3CFAD4979B0E0600746F2E2527823FB854DD890E65E937E15B122FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Program Files (x86)\Avira\VPN\Newtonsoft.Json.dll
Size 701KB
SHA256 cd59cc9622b588afb1e16ea9dd1e28d46a1e06b62f05e9aaace0fdc5c4268ab2
MD5 ce82bb579712330b665cc337f0921129
SHA1 2413bc25b00ba26be3efee8c2b0d9c693a3d1d41
SHA512 bf97c6c4c68e3da419f4b0ace3c6cf8691ab99924df6e3fcb56747b8279037046aecb2c964833473195f2675022d72b9bd88e4254203bb69421fcd4fd3c5b99d
SSDEEP 12288:yBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUs3VK:yBjk38WuBcAbwoA/BkjSHXP36RMGN3VK
TLSH
T140E4394123F98F2BE1AF6B75B4704E1543F9F817A6B5E78F9A04D9A91C43B418E403A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.Sinks.File.dll

Path C:\Program Files (x86)\Avira\VPN\Serilog.Sinks.File.dll
Size 37KB
SHA256 dac5243b7ebf8e8a20e1a759523b9a2b1edc56ad80f4bfe4e1afc028cbfebae1
MD5 8300b0612ab2d5e0944b7443a889643f
SHA1 e7868e8e73b371a4266fb433b550037ea8e03b84
SHA512 5f2a02f8afb82c0de98299efa5dc7335c612c24d1f01394e09b4b564fee8783cb575969762ee8c9d7e9acc2e456f3364e351d7383d1ea93ea4bc87448f62e292
SSDEEP 768:l2IVwX/kpnTXMcTWpHdD2JRrcfwcyp0TE3AmbLU:fwXcpnTXMwWmJRXVp0gVs
TLSH
T14B033A867BEC5217DAEE4F78F9F122160B71FA72AC22EA8E049C154D5C16B900E1176F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.dll

Path C:\Program Files (x86)\Avira\VPN\Serilog.dll
Size 153KB
SHA256 0a77ec95c2e5b43c2b5fc1f654475d1d0d227fd7b19fca324c42acce174f6bfd
MD5 249f6dbb2ceb18ca52a37f62a1dfbefa
SHA1 95ec623b87fb5d97c7db86554ca5c542da5cf7a5
SHA512 0eb5cf84b9ccadacfd440b353d23475b4430cac0df1cb71820825ffa90b8a6a384e89fa2a33d3f2609bfbc239dd21fc3057f491d0353284b95cc03cf9d661c85
SSDEEP 3072:7jZjs+3+wx+85/kuWL/h9AQkNvMuaO2Cf0VZ:7jxs+3Q8SZLJWA+0VZ
TLSH
T13AE34A5B73EC4B25D6FE6A34F4A850214F72F4DB382BE35FA945D6E61812B50AB00336
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ServiceStack.Text.dll

Path C:\Program Files (x86)\Avira\VPN\ServiceStack.Text.dll
Size 199KB
SHA256 678b767a6b621020b00b3920943105f2ae44b6f729e25c4539847021249797d0
MD5 58aa81190c215087f17d85cb6e55dd33
SHA1 d397668c054335bcd0d7df3e8e061194c844e715
SHA512 5541e7fde7138788d25f45001cc237bc9f62e4b15b49ac00ef7426aec1fe1a7de22470c5531abe87d9ee57dac4b34e4da1fdc188a56b0a27662a0f2c6e36ced7
SSDEEP 3072:yzL1AtpXQLhGJheRCP5OyG/uR+Py/v79Lx+lHdFA8wxlPUUKmHcqzCv0w7V1N:yzMpXQ9XRCP5bGpPyr3+l9FA9j5aV1N
TLSH
T1AB147C8833684A11C7EE46B47860AD558A72F507D4D2FFA37DD4A4FB8A1738A27843E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SharpRaven.dll

Path C:\Program Files (x86)\Avira\VPN\SharpRaven.dll
Size 103KB
SHA256 74d9c20e3d52a7eab8c810dde770155b1b4a899c82d0f748ababdfb39c7d499e
MD5 f71a09dfb527f9c097e8231a9e1839c6
SHA1 a992f7843e73689b703f595a83df3bcd58672edb
SHA512 015264d9e312262ee7aaaab6610887d2c22c6b9321eccfd5390490e5d526f7b7f654ffdb586b56306a550cd87d1731c3429063432cc7eadafb3faedad9a82b7d
SSDEEP 1536:38uCSVATi04rrWaLSyUlnx8FxaCXNpS71eP4uEoZ5DVP:XCfTiRSyUl+eCXNM7HLoZ5DVP
TLSH
T147A3193517A89768CE5D4734E06C239AD7B1624F6D31E69A8B18A5CE2F037C34B112FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.DiagnosticSource.dll

Path C:\Program Files (x86)\Avira\VPN\System.Diagnostics.DiagnosticSource.dll
Size 172KB
SHA256 7d79a90e94abbdfa79c901faaabda24f33ffc21b259b2cfdfecb5195575fb79d
MD5 a0465e1aecc932bfcb4b5a62bcebae08
SHA1 a8ae65c31eb5ba52b80dc4f68779786ac4b2ea9a
SHA512 a8b3a0fe4dd1420e8aa544adb9f8b0e259a3cf7f7adf0b6c65525d244c637bc4bcd333a4ee30c7e21a50fb26bc91f3b4a0e94b30e1e1ea7023f8b2bf908b9dc1
SSDEEP 3072:nNcLPcNABKuTwIxpRoZgM4U2Ny1jb54rbHXrwZ2CwOVV:N1NAB9qZgM4U4qnQwiOVV
TLSH
T178047C0433E84BABCEEF1B79F574C8524771E917B112E7AD6D04B8ED6823B914E02267
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VPN.Core.dll

Path C:\Program Files (x86)\Avira\VPN\VPN.Core.dll
Size 189KB
SHA256 cb71a544ad3f33c93daf0b90ff87d48fbd4713b00889d98be542202acd762f8a
MD5 d04b32bd07a4cc780651fa94e8b131a1
SHA1 6761871b6980f4f6325e72e0cb0ec4c813d093cd
SHA512 7abab1f9a95aa6295212e782d959a917d17a34885dc5e2cd00d99fbd3da49cb5fd66d08ef0789ce11fead4e7ec131deb02ec4d779ae9fa04e077025a63df2965
SSDEEP 3072:gXY30Om7Bcnj0JNtD7bGW3ik+DMHLzP2Icojic6myAUpfVl:3kR7Bcj0RGkF+DMrzPEfVl
TLSH
T10214396023F49E12F7BF4B7DF8704215CB76BA87AC2AE38D4D4864ED285A381D541B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Avira.VpnService.resources.dll

Path C:\Program Files (x86)\Avira\VPN\en-US\Avira.VpnService.resources.dll
Size 23KB
SHA256 25f5cb88461617650c2c40201cb9066a0fda9935408697628b54ae2e1f03ae2c
MD5 98dfc9927e85fc2ac956cb64bb2a9841
SHA1 8d0fcbb2660ae84565503a9dc3f4f01ddfe3b387
SHA512 750bd2ab62ddb45ca9d4b0882b2e956c4f408cc390737bd1b94ee36701752bf454ed03078be2702604aa6632765cc88e5e820357a995c360d83685ab4813aceb
SSDEEP 384:KsXrgiWpij699pO95w9MLSdzTaWpwK37TlUASldei2WSx7bL3:3bgiWpi3OzTaqZPAmbL
TLSH
T19AB218076BF41916FAF30F35B8F9D6129C33B8865E30D49E1421021D4AA2B829BB537F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VpnPrivateSettings.backup

Path C:\ProgramData\Avira\VPN\VpnPrivateSettings.backup
Size 262B
SHA256 291ed56031d965d67d3d05fa08341680bd9b4c33fca31abce28a43caf10f8f4a
MD5 02a3c88e21bd2cdf774c3ea08758b7f1
SHA1 8c58e3b16425bf2103d42069e7800c888a194b91
SHA512 77317fe0a7350750c05149eec65a0842dafdd498d9e1390121c08ed50e9e1249c95f61aa712cd05937fd3fc4fd443e4fa2639030700f2c0fb039ab1efb15f9c6
TLSH
T1F7D09700A121942BFBB2202FBE34AF0C007EFA1711C00C307DB201930B099E8038F166
MD5 SHA1 SHA512 TLSH

Submit Download

VpnPrivateSettings.backup

Path C:\ProgramData\Avira\VPN\VpnPrivateSettings.backup
Size 429B
SHA256 35a033f7077db801021a2a210597023965ecfeff5927c5384200c49bbff09e59
MD5 0473d1e10c4aa217a584dad7275e2c53
SHA1 3f20878f0e321b182ca9850a5b0ea221a4045ebe
SHA512 60ed95f613759a9a9d750c50b7a0dda25b14fc9b839c277f820d05b73fcf1309a7469baca69970043fb3cadb9a9437ef8b3b77c309dab9aa8f811428dc2d8821
TLSH
T10CE0E521E6B0745BFB72201FBD346F18007BF91B21C00E20BD7145D32F115E4224B0D2
MD5 SHA1 SHA512 TLSH

Submit Download

VpnPrivateSettings.backup

Path C:\ProgramData\Avira\VPN\VpnPrivateSettings.backup
Size 5KB
SHA256 f8fa66740fa6576561bb65d1a1debcbd47ef9edf2552e22d75d3ea2976aae93a
MD5 df397a143ec0d21ce237b983f867fe7f
SHA1 afb7a14806400ea16c64d0fef9ef46a3699ab789
SHA512 9e72e6eedf933edab52f1b8e2aa344b539cde95a1809aafe0840b104d3be7106dcd5a988d0d446731058a4dbb980b4de36be3d65046edeb2d423974498c66a2b
SSDEEP 48:38jGf+0Baut1YJFuBCS9xQumu+u22dQK28l4rPniUDMiK9tec6rC0c:nf+0BrPrX8m9tec6G0c
TLSH
T118C15C9B9480AEBEC7D057F315425A9CB10E2C0DD4CC2C5D75F49FACBAF9233615922A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VpnPrivateSettings.backup

Path C:\ProgramData\Avira\VPN\VpnPrivateSettings.backup
Size 130B
SHA256 a293adddc03a2d616999e591d8054f168f3eb537cd1bbe96de16d9c6f2242ab7
MD5 4813ffc2ea0ddee18e6be65e47640efa
SHA1 4f5af6445a81f2d843c322b473b678ece4e6bf0c
SHA512 5a9252d5b08dd0303cf21947049638113e25c49812b0d1f9991add6a2bcebdf407cf1504b2da53b5bcc354cf7ff02144a4bf2b6740ee24702e833a7a6e08308d
TLSH
T1CFC02B0032314417E7B3303ECF14BF1826157D4B20C004601C72015209001D80286281
MD5 SHA1 SHA512 TLSH

Submit Download

VpnPrivateSettings.config

Path C:\ProgramData\Avira\VPN\VpnPrivateSettings.config
Size 534B
SHA256 3ad9589d4c426341ac0fb25eac0e9b4678f674a95cb4a382effc9e7afd357872
MD5 1e816fc02419ce1b66a9b2e1826342ac
SHA1 699d4e30ffc41d148cd17ba48729a6d56190f5e5
SHA512 4b62278ac25774eab20c8d21807162c21231d5af113397792d307ab9b8afce6b43ad8303ed357e0b5e106eeec57ad3074acf78096958b5281350d1fb7f845065
TLSH
T1FCF0B421E67178ABFB72211FBD28AF49057BF95B21C44A21B9B242832F014D4228B1E2
MD5 SHA1 SHA512 TLSH

Submit Download

VpnPrivateSettings.config

Path C:\ProgramData\Avira\VPN\VpnPrivateSettings.config
Size 534B
SHA256 6a40e05d2b0b75588013df5638c55a805b2a62cd177be69229a4240c6bbb558c
MD5 d387e50f4ea8bf36b8fa62e842c463fe
SHA1 46452b32c8fe915ad9ebca6285b9067a7273c686
SHA512 afeaac5a351193ff2faaee9f4f1d90b26e79178ccd0edb0298a90f81e8477083d8e4e8245c3ee88644681b467b920c1a2f75555acc06f75454daa453e2ff15d9
TLSH
T164F0BB21D670789BFB72211FBD286F49017BF55B21C44A10B9B142C72F054D4224B0D2
MD5 SHA1 SHA512 TLSH

Submit Download

VpnPrivateSettings.config

Path C:\ProgramData\Avira\VPN\VpnPrivateSettings.config
Size 5KB
SHA256 2ac27c1d17e59e0c6eab7b24ead61d3a7f8c95822c40aca61834712c13d932aa
MD5 bd420c73193421d3d38889b48dc4423d
SHA1 033db7184262d658a8489f70bc8ef0180f32617b
SHA512 cf3eb63f100c844ca693844ff4f80fc70f48e19527566b754d0866623baa5cc243aeed26d7bfa8aa6c546c6e66b69104c6b8ac2a52c33d2188a36b1f08073bc1
SSDEEP 48:38jG5hBaut1YJFuBCS9xQumu+u22dQK28l4rPniUDMiK9tec6r9:n5hBrPrX8m9tec6x
TLSH
T135C16B9BA4809EBEC7E057F315425A9CB10E1C0DD4CC2C5D75F89FACBAF9233615922A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VpnPrivateSettings.config

Path C:\ProgramData\Avira\VPN\VpnPrivateSettings.config
Size 66B
SHA256 cc05bd02cb929f5ef7a9362698d7794845899dd6510fd41eb5f0a95d708a68dc
MD5 44944cd590899045e3cdeb971fddd252
SHA1 33c584007e0df8fea3e677c6892d6b5549d1c94d
SHA512 f4f4feec8c79599f41ce83371dd861fea9dd05aaa5211f5be53e2d61df154b6965db17ee8df952a8d8c864fa67aba5b9d1ef0f94608e42a50c057cfd82ccf5ed
TLSH
T18DA002108A02946A47D8056A9B758658536579F224E018B448715EB84E550D707C4365
MD5 SHA1 SHA512 TLSH

Submit Download

VpnSharedSettings.backup

Path C:\ProgramData\Avira\VPN\VpnSharedSettings.backup
Size 346B
SHA256 25f34081c9950e62c5417fa586b064878603b62f6180f9e17a2b4907bb6039d6
MD5 0919ade97657b72597d45a1293bece47
SHA1 2c64504682c55c712d7c6c8cab1546a3cf0fbef3
SHA512 20dd4e640ce802d49e0c1da5bd96032dc8a0cb53928fd17a86e568a3d1e4f6cf73d2052680a3dae053e31fb30d6ac37f3265f2875542cab890df1ee008d43336
TLSH
T1ECE0866193E228BBEF31423FEA6D4F50137AF50D56898E98953102EB3E061D22757095
MD5 SHA1 SHA512 TLSH

Submit Download

VpnSharedSettings.backup

Path C:\ProgramData\Avira\VPN\VpnSharedSettings.backup
Size 417B
SHA256 b389568a443e34def6522462efff3660c375ba5d3090ecb9c945110a659fe1a9
MD5 600d206024bf97742266310295a3f676
SHA1 3d44c6e0ae47452bd0429e07884fda1d640b5a8a
SHA512 804efe1754b8c6c1725b7c3754efa692cfd3fc67c1e3a8a308fb201716bde5f27fabec258a202a0b0dcc39f7a3ebd69ae6396bbf7c07e92fdbb82e4054b95e81
TLSH
T15BE09B6193F238BAEF72553FDD6C4F54133AF40D66888E54993102D73E061D12757196
MD5 SHA1 SHA512 TLSH

Submit Download

VpnSharedSettings.backup

Path C:\ProgramData\Avira\VPN\VpnSharedSettings.backup
Size 710B
SHA256 b1f5bdea56f75c89c15671af616b0dc4d95c9e8d3ff65c408643a51312ab544e
MD5 3ee821cf25ac3e2d0853ddb6768f5cd7
SHA1 a6b9375e0dc37157560be8ad4b493eec4ab346d6
SHA512 89ffe0b69350e7c7123c3efc784f48a6aee49f613fa1d1c7225cb05149d0b6444af7f3d2833ca55ed9ad51387fc182cccf8d9b5a8f1cf777ae5d621dd54b9c45
TLSH
T19101DF6AD3F23CBAEF32612FEE5C8F941B3EF45D25488E18A97002D63E451C52A57082
MD5 SHA1 SHA512 TLSH

Submit Download

VpnSharedSettings.backup

Path C:\ProgramData\Avira\VPN\VpnSharedSettings.backup
Size 149B
SHA256 b186a55a19e91ab9c673c0a0611c930c89b5b992d7843e81bbb84b3fec199b30
MD5 66f1c8961b7cf66a20d76de55c14443d
SHA1 78b9a03da3ec43e3616cb250a61c74670fd5fcea
SHA512 17db398d781c7aa404c7b055189060dfe019b586be7abcf165f94cc99d17d5e59328856ddb5bbc98ed1361490c5b7fa43724f971f72e4c61b4e200952a80a37c
TLSH
T199C02B2023131C369F71453FD72C8E241335790A10D58CDC443202F71A061D30391196
MD5 SHA1 SHA512 TLSH

Submit Download

VpnSharedSettings.backup

Path C:\ProgramData\Avira\VPN\VpnSharedSettings.backup
Size 233B
SHA256 e64d2cc6f9b9197c805555d80533946fe1e76a2df6f7de402c603ced76dec81f
MD5 d619e1f2fe0503b8b8238ec81e78dfaf
SHA1 09649af42fc422e1f81928e948809cb13d34c68f
SHA512 2093258d56343da47d558dcb10d68917a281da4d06dbde27f0ef834af5bdff297481f36395d3a04e814ae03282d02e1a515743e5861114416734f86daf6bf550
TLSH
T119D0A76023526C36AF31853FD72C4E201375B80915D9CDCC443212EB2A061D34352096
MD5 SHA1 SHA512 TLSH

Submit Download

VpnSharedSettings.config

Path C:\ProgramData\Avira\VPN\VpnSharedSettings.config
Size 270B
SHA256 644c3c044c0a01efda323d871af655f1f7e069b3c929edf5065f6d07ef26c096
MD5 bf610c2af93b12553af73bfc8e0f3ed5
SHA1 00fa6602437b381b6659e37154952c94e7500922
SHA512 aa2fe01c9f30827931fb8c2a6052e9079bafaa64e9b844d9e81311a5b5df37434fdc0d8ebc2821ba6fefae0246898b8ace11bc1730cf2d512d438b6c00a73986
TLSH
T199D05B6063926876EF31453FDB2C4E502375F50915D98D98457113E72E0A5D25352096
MD5 SHA1 SHA512 TLSH

Submit Download

vpndbg.log

Path C:\ProgramData\Avira\VPN\vpndbg.log
Size 2KB
SHA256 e1e8a41637833da0e6bcbdc1390f82141657fdb4819adc9073adedf129b41264
MD5 e5ca606cf5267768a2567b740cc2ebe8
SHA1 0342343317b6db7bf58c56880893a3ba5e82835e
SHA512 ad220df483a84456c613e77b941beca01f437c54f8f96e06e6e9c461bb62d49b032f46231cae2cbd6feb5f5cc6f33eafceca1f5391731dd755ee3a9c655af760
TLSH
T1DF41AE09B7B538B20E775237AC417F00573DE9AAF71C68586FF71A0AA5D0D0FA264305
MD5 SHA1 SHA512 TLSH

Submit Download

FindProcDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsistemp\nsn3228.tmp\FindProcDLL.dll
Size 3KB
SHA256 7ffc549e7f679a08c77fa230654b77cdffb3444296bb7c6b8b5769db374b61ee
MD5 75e7351a0f836b8659e6f315683c29f7
SHA1 66b733d1c978d68cadc245e7efbfcae32807429d
SHA512 f03400798b07ccca5e12fa119a586ee9444deb0d2419aced24d93fd84a4702d66864a71b40a11b04b1dbe56e36481cd6a644aec0347bc82bc7375b27bc403fe4
TLSH
T17C71C56663A09FFED1A41330309E38176DDA703123BB66DACE3B761ABBE0081C835711
MD5 SHA1 SHA512 TLSH

Submit Download

INetC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsistemp\nsn3228.tmp\INetC.dll
Size 21KB
SHA256 5520208a33e6409c129b4ea1270771f741d95afe5b048c2a1e6a2cc2ad829934
MD5 92ec4dd8c0ddd8c4305ae1684ab65fb0
SHA1 d850013d582a62e502942f0dd282cc0c29c4310e
SHA512 581351aef694f2489e1a0977ebca55c4d7268ca167127cefb217ed0d2098136c7eb433058469449f75be82b8e5d484c9e7b6cf0b32535063709272d7810ec651
SSDEEP 384:VpOSdCjDyyvBwRlX+ODbswYM2s74NS0v0Ac9khYLMkIX0+Gzyekx:rdCjW/lX1PfYM2X1
TLSH
T123A23B5253605FFEE3D71938B8B7773745EAE76464178A8F06732E8918B2352B930382
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsistemp\nsn3228.tmp\System.dll
Size 12KB
SHA256 a44ca08afb3f6bafd76aa35c259f3d599fe34f6f49ea5118626c1c1a540b0f03
MD5 81e268e27dbbcadbf116b5a9402195ab
SHA1 bd2b701b2e5e279786e179bceee2dc132a2afc37
SHA512 784115c69df4a6f180efb4d48cf5c6e8c2393b8ce9aa664f192abf5a260984880c668dd0f93564126d2fc718130570c4f6224d1373d73bcb8343f04f6ede25de
SSDEEP 192:VFiQJ77pJp17C8F1A5xjGNxrgFOgb7lrT/d93:97pJp48F2exrg5F/d
TLSH
T10C424B1583618EF3F5961E3C00667E2F2B79BE3416F104A39FE34481AD9A1CF99B5392
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base64.dll

Path C:\Users\Admin\AppData\Local\Temp\nsistemp\nsn3228.tmp\base64.dll
Size 40KB
SHA256 7e10ef2723a50b7346449f8bb39efab8a99e2815d33d311ecb8112734f91519d
MD5 ac6fb776262b63562c00374392fe1c55
SHA1 045dcad3edcd1c6865f5dea95ace35f4d9964b78
SHA512 2c511c5f2bb265fd247e43c47046a3cddad2b72a0fd3b35fcb70ab53d7fbc070d36eadd93c279680306d30d6ef5730fcbfed01195a85761ae571e2d324416ed5
SSDEEP 768:h0lTvjkgjp5vVBFTKnebbo1QiB9PfdkMClc8o4CJh1o:evAgbJTKnMo/dXY3ohp
TLSH
T130036D22349181F3E1AB82761595CB1F9F7EEB1403D218C38FF4694A6F256E1A53F24B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsistemp\nsn3228.tmp\nsExec.dll
Size 6KB
SHA256 e20666c498941d36bfd0eae411ad73c475d043cee39b50c31734a70eecaae0bb
MD5 13bd8e89dc79004d85ab02626e08c3c5
SHA1 0ef0efb3237233de26f55c4420753ed0fed418ad
SHA512 58841cc9e8313775a097a93e68952d8005b826bf1349dc24d49e3128b87e9021a028d2d4e738997390f1625f7ae7744a9ff85289f6c78f5ebd67c0da61ef2120
SSDEEP 96:pOBtYZKtPsrqBApt1JHpb9XWk7Qe06iE6mE6YNFyVOHd0+uUwEX:ptZKtrAJJJbP7iEHEbN8Ved0Pw
TLSH
T1F7D1F83A2AD12DF3D04889702827793ACBB9C8360F500650DF671EE225E1DE7DB2038B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsistemp\nsn3228.tmp\nsProcess.dll
Size 70KB
SHA256 8f80ef429ce7c8a1ac7958ab36ec177f732dc924d14b21230da045e5ed1b255a
MD5 9c452d3cb1f2b06c16467849755cd724
SHA1 35f2e9754e9dc226baa8b0cbf21db2b523248a73
SHA512 438e406a18db363008776172e20f6422db71c5b1eaeb63f0a8100f05c5365f52ee177851c7710985b529e1b5fb2be2ac8142cc6e0ca08628054b6eabe063fea2
SSDEEP 1536:8Z6GdfXw+kpgUfswHfQeMVYOsW+ocd3q8DsRUClo:8ZgGURzMVY73q8DUi
TLSH
T1EF635C10B2D0C8B1E1BE1E391434D6616A7E3D214FE48DAB3B99012E5F741D2AB36E67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsisXML.dll

Path C:\Users\Admin\AppData\Local\Temp\nsistemp\nsn3228.tmp\nsisXML.dll
Size 12KB
SHA256 77aa1a74a556f00f16baf9b94637fa997bd4085695ba81bf496223644e43e815
MD5 9f3d5344e7ede1f41f99d8fc37fd01ad
SHA1 d0322ce3ba30a924daa1c9e322846a3d8ccda878
SHA512 2849b261b77fa2abf0d0efc7604ccce7f502d20a556eea9877cfe1cbc6d515d8fe41986943081629243b81987cddd54613ee01fc7859ae16eab57f6ca2cd4bfc
SSDEEP 192:EWauH4FuPphUmX1VGsGN2kmQNJnm1ilWnE:EWasoMphljGs4NJoil2
TLSH
T1D242C8033EEAD8B7C94A0278AF977389D6B4630524810D06A3564F0B6F3199EFD7D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

registry.dll

Path C:\Users\Admin\AppData\Local\Temp\nsistemp\nsn3228.tmp\registry.dll
Size 24KB
SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
MD5 2b7007ed0262ca02ef69d8990815cbeb
SHA1 2eabe4f755213666dbbbde024a5235ddde02b47f
SHA512 aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca
SSDEEP 384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA
TLSH
T1FCB26B82B1D1E973D09F0479AB993F15E3EFAD507670EC5300667AC732A0AA2C769713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2832-1028-0x0000013F55480000-0x0000013F554F6000-memory.dmp

Download

memory/2832-964-0x0000013F3C660000-0x0000013F3C66C000-memory.dmp

Download

memory/2832-1167-0x0000013F3C7B0000-0x0000013F3C7C0000-memory.dmp

Download

memory/2832-1047-0x0000013F55050000-0x0000013F5505A000-memory.dmp

Download

memory/2832-1056-0x0000013F55060000-0x0000013F5506C000-memory.dmp

Download

memory/2832-1029-0x0000013F54FC0000-0x0000013F54FDE000-memory.dmp

Download

memory/2832-1062-0x0000013F55070000-0x0000013F5507E000-memory.dmp

Download

memory/2832-1064-0x0000013F555C0000-0x0000013F555F4000-memory.dmp

Download

memory/2832-1066-0x0000013F55500000-0x0000013F55508000-memory.dmp

Download

memory/2832-986-0x0000013F3C750000-0x0000013F3C758000-memory.dmp

Download

memory/2832-985-0x0000013F3C810000-0x0000013F3C83E000-memory.dmp

Download

memory/2832-983-0x0000013F3C730000-0x0000013F3C740000-memory.dmp

Download

memory/2832-1067-0x0000013F556B0000-0x0000013F5575A000-memory.dmp

Download

memory/2832-1060-0x0000013F55560000-0x0000013F55572000-memory.dmp

Download

memory/2832-1069-0x0000013F55510000-0x0000013F5551A000-memory.dmp

Download

memory/2832-981-0x0000013F3C7C0000-0x0000013F3C7DC000-memory.dmp

Download

memory/2832-966-0x0000013F3C790000-0x0000013F3C7A4000-memory.dmp

Download

memory/2832-1058-0x0000013F55530000-0x0000013F5555A000-memory.dmp

Download

memory/2832-1054-0x0000013F55040000-0x0000013F5504E000-memory.dmp

Download

memory/2832-1045-0x0000013F55030000-0x0000013F5503E000-memory.dmp

Download

memory/2832-962-0x0000013F3C7B0000-0x0000013F3C7C0000-memory.dmp

Download

memory/2832-961-0x0000013F3C760000-0x0000013F3C782000-memory.dmp

Download

memory/2832-959-0x0000013F55080000-0x0000013F55132000-memory.dmp

Download

memory/2832-1166-0x0000013F54F10000-0x0000013F54FBD000-memory.dmp

Download

memory/2832-1165-0x0000013F3C620000-0x0000013F3C62C000-memory.dmp

Download

memory/2832-957-0x0000013F3C6B0000-0x0000013F3C6DA000-memory.dmp

Download

memory/2832-955-0x0000013F3C6F0000-0x0000013F3C722000-memory.dmp

Download

memory/2832-953-0x0000013F3C680000-0x0000013F3C6AA000-memory.dmp

Download

memory/2832-1111-0x0000013F55E90000-0x0000013F563B8000-memory.dmp

Download

memory/2832-951-0x0000013F3BC90000-0x0000013F3BCF4000-memory.dmp

Download

memory/2832-1118-0x0000013F559B0000-0x0000013F559FA000-memory.dmp

Download

memory/4028-1123-0x0000000002AA0000-0x0000000002AAB000-memory.dmp

Download

memory/4028-1156-0x0000000002430000-0x0000000002436000-memory.dmp

Download

memory/4028-943-0x00000000027F0000-0x0000000002849000-memory.dmp

Download

memory/4336-1085-0x00000156425B0000-0x000001564265D000-memory.dmp

Download

memory/4336-1084-0x0000015628380000-0x000001562838C000-memory.dmp

Download

memory/4336-1048-0x0000015627F00000-0x0000015627FCE000-memory.dmp

Download