General

  • Target
    VpnInstaller.exe
  • Size 7.4MB
  • Sample260708-ph9sfafw2w
  • SHA256 84e7c2d32cbb0b1546c14fe3f7fbceb36ca143dbae8f19fb03f91f7a4a42d8ba
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Suspicious SVG script tag 1 IoCs
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

  • NSIS installer 4 IoCs

File Explorer

  • VpnInstaller.exe
    .exe 7.4MB
  • $PLUGINSDIR/FindProcDLL.dll
    .dll 3KB
  • $PLUGINSDIR/INetC.dll
    .dll 21KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/base64.dll
    .dll 40KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 70KB
  • $PLUGINSDIR/nsisXML.dll
    .dll 12KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • App/css/vpn-1.0.0.css
    84KB
  • App/css/vpn-1.0.0.min.css
    61KB
  • App/css/vpn-1.0.0.min.css.map
    146KB
  • App/css/vpn-vendor-1.0.0.css
    58KB
  • App/css/vpn-vendor-1.0.0.min.css
    50KB
  • App/fonts/KievitCompPro.woff
    43KB
  • App/fonts/KievitWeb-Light.eot
    100KB
  • App/fonts/KievitWeb-Light.woff
    54KB
  • App/fonts/KievitWebPro-Bold.eot
    100KB
  • App/fonts/KievitWebPro-Bold.woff
    55KB
  • App/fonts/KievitWebPro-Book.eot
    100KB
  • App/fonts/KievitWebPro-Book.woff
    55KB
  • App/fonts/KievitWebPro-Medi.eot
    100KB
  • App/fonts/KievitWebPro-Medi.woff
    55KB
  • App/fonts/avira-icons-regular-webfont.eot
    12KB
  • App/fonts/avira-icons-regular-webfont.ttf
    22KB
  • App/fonts/avira-icons-regular-webfont.woff
    14KB
  • App/fonts/ionicons.eot
    117KB
  • App/fonts/ionicons.svg
    .svg .xml 328KB
  • App/fonts/ionicons.ttf
    184KB
  • App/fonts/ionicons.woff
    66KB
  • App/images/gif/loading.gif
    .gif 8KB
  • App/images/png/Map.png
    .png 234KB
  • App/images/png/Map_pro.png
    .png 163KB
  • App/images/png/Nearest.png
    .png 15KB
  • App/images/png/VPN.png
    .png 1KB
  • App/images/png/angle-down-dark.png
    .png 282B
  • App/images/png/angle-down-light.png
    .png 185B
  • App/images/png/neagentDialog.png
    .png 22KB
  • App/images/png/[email protected]
    .png 41KB
  • App/images/png/neagentDialogMagnifier.png
    .png 10KB
  • App/images/png/[email protected]
    .png 21KB
  • App/images/png/pulsar_watermark.png
    .png 2KB
  • App/images/png/purchase/all_devices_Black.png
    .png 794B
  • App/images/png/purchase/[email protected]
    .png 1KB
  • App/images/png/purchase/all_devices_Grey.png
    .png 797B
  • App/images/png/purchase/[email protected]
    .png 1KB
  • App/images/png/purchase/mac_Black.png
    .png 599B
  • App/images/png/purchase/[email protected]
    .png 1KB
  • App/images/png/purchase/mac_Grey.png
    .png 616B
  • App/images/png/purchase/[email protected]
    .png 1KB
  • App/images/png/ref-copy.png
    .png 258B
  • App/images/png/ref-tick.png
    .png 538B
  • App/images/png/regions/Nearest.png
    .png 15KB
  • App/images/png/regions/ad.png
    .png 1KB
  • App/images/png/regions/ae.png
    .png 563B
  • App/images/png/regions/af.png
    .png 990B
  • App/images/png/regions/ag.png
    .png 1KB
  • App/images/png/regions/ai.png
    .png 1KB
  • App/images/png/regions/al.png
    .png 1007B
  • App/images/png/regions/am.png
    .png 591B
  • App/images/png/regions/an.png
    .png 769B
  • App/images/png/regions/ao.png
    .png 933B
  • App/images/png/regions/aq.png
    .png 1019B
  • App/images/png/regions/ar.png
    .png 611B
  • App/images/png/regions/as.png
    .png 1KB
  • App/images/png/regions/at.png
    .png 466B
  • App/images/png/regions/au.png
    .png 1KB
  • App/images/png/regions/aw.png
    .png 806B
  • App/images/png/regions/ax.png
    .png 825B
  • App/images/png/regions/az.png
    .png 826B
  • App/images/png/regions/ba.png
    .png 1KB
  • App/images/png/regions/bb.png
    .png 947B
  • App/images/png/regions/bd.png
    .png 998B
  • App/images/png/regions/be.png
    .png 648B
  • App/images/png/regions/bf.png
    .png 740B
  • App/images/png/regions/bg.png
    .png 483B
  • App/images/png/regions/bh.png
    .png 907B
  • App/images/png/regions/bi.png
    .png 1KB
  • App/images/png/regions/bj.png
    .png 607B
  • App/images/png/regions/bl.png
    .png 1KB
  • App/images/png/regions/bm.png
    .png 1KB
  • App/images/png/regions/bn.png
    .png 1KB
  • App/images/png/regions/bo.png
    .png 829B
  • App/images/png/regions/bq.png
    .png 469B
  • App/images/png/regions/br.png
    .png 1KB
  • App/images/png/regions/bs.png
    .png 834B
  • App/images/png/regions/bt.png
    .png 1KB
  • App/images/png/regions/bv.png
    .png 743B
  • App/images/png/regions/bw.png
    .png 583B
  • App/images/png/regions/by.png
    .png 859B
  • App/images/png/regions/bz.png
    .png 1KB
  • App/images/png/regions/ca.png
    .png 1005B
  • App/images/png/regions/cc.png
    .png 1004B
  • App/images/png/regions/cd.png
    .png 1KB
  • App/images/png/regions/cf.png
    .png 779B
  • App/images/png/regions/cg.png
    .png 1KB
  • App/images/png/regions/ch.png
    .png 631B
  • App/images/png/regions/ci.png
    .png 629B
  • App/images/png/regions/ck.png
    .png 1KB
  • App/images/png/regions/cl.png
    .png 657B
  • App/images/png/regions/cm.png
    .png 804B
  • App/images/png/regions/cn.png
    .png 793B
  • App/images/png/regions/co.png
    .png 510B
  • App/images/png/regions/cr.png
    .png 1KB
  • App/images/png/regions/cu.png
    .png 1016B
  • App/images/png/regions/cv.png
    .png 890B
  • App/images/png/regions/cw.png
    .png 1KB
  • App/images/png/regions/cx.png
    .png 1KB
  • App/images/png/regions/cy.png
    .png 729B
  • App/images/png/regions/cz.png
    .png 849B
  • App/images/png/regions/de.png
    .png 602B
  • App/images/png/regions/dj.png
    .png 1004B
  • App/images/png/regions/dk.png
    .png 595B
  • App/images/png/regions/dm.png
    .png 1KB
  • App/images/png/regions/do.png
    .png 1KB
  • App/images/png/regions/dz.png
    .png 962B
  • App/images/png/regions/ec.png
    .png 1KB
  • App/images/png/regions/ee.png
    .png 522B
  • App/images/png/regions/eg.png
    .png 622B
  • App/images/png/regions/eh.png
    .png 966B
  • App/images/png/regions/er.png
    .png 1KB
  • App/images/png/regions/es.png
    .png 873B
  • App/images/png/regions/et.png
    .png 1KB
  • App/images/png/regions/fi.png
    .png 523B
  • App/images/png/regions/fj.png
    .png 1KB
  • App/images/png/regions/fk.png
    .png 1KB
  • App/images/png/regions/fm.png
    .png 910B
  • App/images/png/regions/fo.png
    .png 607B
  • App/images/png/regions/fr.png
    .png 637B
  • App/images/png/regions/ga.png
    .png 560B
  • App/images/png/regions/gb.png
    .png 1KB
  • App/images/png/regions/gd.png
    .png 1KB
  • App/images/png/regions/ge.png
    .png 868B
  • App/images/png/regions/gf.png
    .png 2KB
  • App/images/png/regions/gg.png
    .png 773B
  • App/images/png/regions/gh.png
    .png 739B
  • App/images/png/regions/gi.png
    .png 1024B
  • App/images/png/regions/gl.png
    .png 925B
  • App/images/png/regions/gm.png
    .png 573B
  • App/images/png/regions/gn.png
    .png 701B
  • App/images/png/regions/gp.png
    .png 1KB
  • App/images/png/regions/gq.png
    .png 1KB
  • App/images/png/regions/gr.png
    .png 775B
  • App/images/png/regions/gs.png
    .png 1KB
  • App/images/png/regions/gt.png
    .png 1KB
  • App/images/png/regions/gu.png
    .png 1007B
  • App/images/png/regions/gw.png
    .png 756B
  • App/images/png/regions/gy.png
    .png 1KB
  • App/images/png/regions/hk.png
    .png 1KB
  • App/images/png/regions/hm.png
    .png 1KB
  • App/images/png/regions/hn.png
    .png 614B
  • App/images/png/regions/hr.png
    .png 982B
  • App/images/png/regions/ht.png
    .png 1KB
  • App/images/png/regions/hu.png
    .png 505B
  • App/images/png/regions/id.png
    .png 490B
  • App/images/png/regions/ie.png
    .png 621B
  • App/images/png/regions/il.png
    .png 790B
  • App/images/png/regions/im.png
    .png 1KB
  • App/images/png/regions/in.png
    .png 701B
  • App/images/png/regions/io.png
    .png 2KB
  • App/images/png/regions/iq.png
    .png 1KB
  • App/images/png/regions/ir.png
    .png 681B
  • App/images/png/regions/is.png
    .png 748B
  • App/images/png/regions/it.png
    .png 642B
  • App/images/png/regions/je.png
    .png 1KB
  • App/images/png/regions/jm.png
    .png 1KB
  • App/images/png/regions/jo.png
    .png 932B
  • App/images/png/regions/jp.png
    .png 705B
  • App/images/png/regions/ke.png
    .png 1KB
  • App/images/png/regions/kg.png
    .png 1KB
  • App/images/png/regions/kh.png
    .png 1KB
  • App/images/png/regions/ki.png
    .png 1KB
  • App/images/png/regions/km.png
    .png 1KB
  • App/images/png/regions/kn.png
    .png 1KB
  • App/images/png/regions/kp.png
    .png 912B
  • App/images/png/regions/kr.png
    .png 1KB
  • App/images/png/regions/kw.png
    .png 690B
  • App/images/png/regions/ky.png
    .png 1KB
  • App/images/png/regions/kz.png
    .png 1KB
  • App/images/png/regions/la.png
    .png 909B
  • App/images/png/regions/lb.png
    .png 832B
  • App/images/png/regions/lc.png
    .png 1KB
  • App/images/png/regions/li.png
    .png 833B
  • App/images/png/regions/lk.png
    .png 1KB
  • App/images/png/regions/lr.png
    .png 837B
  • App/images/png/regions/ls.png
    .png 1KB
  • App/images/png/regions/lt.png
    .png 560B
  • App/images/png/regions/lu.png
    .png 469B
  • App/images/png/regions/lv.png
    .png 534B
  • App/images/png/regions/ly.png
    .png 1KB
  • App/images/png/regions/ma.png
    .png 806B
  • App/images/png/regions/mc.png
    .png 490B
  • App/images/png/regions/md.png
    .png 1KB
  • App/images/png/regions/me.png
    .png 1KB
  • App/images/png/regions/mf.png
    .png 1KB
  • App/images/png/regions/mg.png
    .png 539B
  • App/images/png/regions/mh.png
    .png 1KB
  • App/images/png/regions/mk.png
    .png 1KB
  • App/images/png/regions/ml.png
    .png 684B
  • App/images/png/regions/mm.png
    .png 2KB
  • App/images/png/regions/mn.png
    .png 900B
  • App/images/png/regions/mo.png
    .png 1KB
  • App/images/png/regions/mp.png
    .png 1KB
  • App/images/png/regions/mq.png
    .png 1KB
  • App/images/png/regions/mr.png
    .png 1018B
  • App/images/png/regions/ms.png
    .png 1KB
  • App/images/png/regions/mt.png
    .png 669B
  • App/images/png/regions/mu.png
    .png 641B
  • App/images/png/regions/mv.png
    .png 788B
  • App/images/png/regions/mw.png
    .png 833B
  • App/images/png/regions/mx.png
    .png 997B
  • App/images/png/regions/my.png
    .png 1KB
  • App/images/png/regions/mz.png
    .png 1KB
  • App/images/png/regions/na.png
    .png 1KB
  • App/images/png/regions/nc.png
    .png 1KB
  • App/images/png/regions/ne.png
    .png 667B
  • App/images/png/regions/nf.png
    .png 2KB
  • App/images/png/regions/ng.png
    .png 641B
  • App/images/png/regions/ni.png
    .png 683B
  • App/images/png/regions/nl.png
    .png 469B
  • App/images/png/regions/no.png
    .png 743B
  • App/images/png/regions/np.png
    .png 1KB
  • App/images/png/regions/nr.png
    .png 822B
  • App/images/png/regions/nu.png
    .png 2KB
  • App/images/png/regions/nz.png
    .png 1KB
  • App/images/png/regions/om.png
    .png 775B
  • App/images/png/regions/pa.png
    .png 735B
  • App/images/png/regions/pe.png
    .png 993B
  • App/images/png/regions/pf.png
    .png 830B
  • App/images/png/regions/pg.png
    .png 1KB
  • App/images/png/regions/ph.png
    .png 964B
  • App/images/png/regions/pk.png
    .png 969B
  • App/images/png/regions/pl.png
    .png 380B
  • App/images/png/regions/pm.png
    .png 2KB
  • App/images/png/regions/pn.png
    .png 1KB
  • App/images/png/regions/pr.png
    .png 992B
  • App/images/png/regions/ps.png
    .png 910B
  • App/images/png/regions/pt.png
    .png 1KB
  • App/images/png/regions/pw.png
    .png 941B
  • App/images/png/regions/py.png
    .png 641B
  • App/images/png/regions/qa.png
    .png 825B
  • App/images/png/regions/re.png
    .png 1KB
  • App/images/png/regions/ro.png
    .png 675B
  • App/images/png/regions/rs.png
    .png 1009B
  • App/images/png/regions/ru.png
    .png 487B
  • App/images/png/regions/rw.png
    .png 735B
  • App/images/png/regions/sa.png
    .png 1KB
  • App/images/png/regions/sb.png
    .png 1KB
  • App/images/png/regions/sc.png
    .png 1KB
  • App/images/png/regions/sd.png
    .png 873B
  • App/images/png/regions/se.png
    .png 715B
  • App/images/png/regions/sg.png
    .png 723B
  • App/images/png/regions/sh.png
    .png 1KB
  • App/images/png/regions/si.png
    .png 730B
  • App/images/png/regions/sj.png
    .png 743B
  • App/images/png/regions/sk.png
    .png 942B
  • App/images/png/regions/sl.png
    .png 488B
  • App/images/png/regions/sm.png
    .png 1KB
  • App/images/png/regions/sn.png
    .png 871B
  • App/images/png/regions/so.png
    .png 829B
  • App/images/png/regions/sr.png
    .png 752B
  • App/images/png/regions/ss.png
    .png 2KB
  • App/images/png/regions/st.png
    .png 1KB
  • App/images/png/regions/sv.png
    .png 710B
  • App/images/png/regions/sx.png
    .png 2KB
  • App/images/png/regions/sy.png
    .png 607B
  • App/images/png/regions/sz.png
    .png 1KB
  • App/images/png/regions/tc.png
    .png 1KB
  • App/images/png/regions/td.png
    .png 689B
  • App/images/png/regions/tf.png
    .png 1KB
  • App/images/png/regions/tg.png
    .png 920B
  • App/images/png/regions/th.png
    .png 524B
  • App/images/png/regions/tj.png
    .png 784B
  • App/images/png/regions/tk.png
    .png 1KB
  • App/images/png/regions/tl.png
    .png 1KB
  • App/images/png/regions/tm.png
    .png 1KB
  • App/images/png/regions/tn.png
    .png 1KB
  • App/images/png/regions/to.png
    .png 608B
  • App/images/png/regions/tr.png
    .png 923B
  • App/images/png/regions/tt.png
    .png 1KB
  • App/images/png/regions/tv.png
    .png 1KB
  • App/images/png/regions/tw.png
    .png 870B
  • App/images/png/regions/tz.png
    .png 1KB
  • App/images/png/regions/ua.png
    .png 574B
  • App/images/png/regions/ug.png
    .png 952B
  • App/images/png/regions/uk.png
    .png 1KB
  • App/images/png/regions/um.png
    .png 830B
  • App/images/png/regions/us.png
    .png 830B
  • App/images/png/regions/uy.png
    .png 809B
  • App/images/png/regions/uz.png
    .png 719B
  • App/images/png/regions/va.png
    .png 852B
  • App/images/png/regions/vc.png
    .png 980B
  • App/images/png/regions/ve.png
    .png 866B
  • App/images/png/regions/vg.png
    .png 1KB
  • App/images/png/regions/vi.png
    .png 1KB
  • App/images/png/regions/vn.png
    .png 818B
  • App/images/png/regions/vu.png
    .png 1KB
  • App/images/png/regions/wf.png
    .png 1002B
  • App/images/png/regions/ws.png
    .png 927B
  • App/images/png/regions/ye.png
    .png 439B
  • App/images/png/regions/yt.png
    .png 1KB
  • App/images/png/regions/za.png
    .png 1KB
  • App/images/png/regions/zm.png
    .png 868B
  • App/images/png/regions/zw.png
    .png 1KB
  • App/images/png/theme-dark-thumbnail.png
    .png 10KB
  • App/images/png/theme-light-thumbnail.png
    .png 8KB
  • App/images/png/three-blue-stars.png
    .png 494B
  • App/images/png/wifi-connected-dark.png
    .png 814B
  • App/images/png/wifi-connected-light.png
    .png 831B
  • App/images/png/wifi-disconnected-dark.png
    .png 853B
  • App/images/png/wifi-disconnected-light.png
    .png 805B
  • App/index.html
    .html .js 5KB
  • App/js/vpn-1.0.0.js
    .js 476KB
  • App/js/vpn-1.0.0.js.map
    759KB
  • App/js/vpn-1.0.0.min.js
    .js 317KB
  • App/js/vpn-1.0.0.min.js.map
    682KB
  • App/js/vpn-vendor-1.0.0.js
    .js 1.8MB
  • App/js/vpn-vendor-1.0.0.min.js
    .js 317KB
  • App/package.json
    51B
  • App/views/directives/collect_diagnostic_data.html
    3KB
  • App/views/directives/confirm_sent_data.html
    3KB
  • App/views/directives/data_usage_popup.html
    2KB
  • App/views/directives/diagnostics.html
    752B
  • App/views/directives/display_settings.html
    3KB
  • App/views/directives/email_confirmation.html
    2KB
  • App/views/directives/features.html
    14KB
  • App/views/directives/forced_login.html
    3KB
  • App/views/directives/header.html
    5KB
  • App/views/directives/keychain.html
    1KB
  • App/views/directives/location.html
    811B
  • App/views/directives/notifications.html
    388B
  • App/views/directives/privacy.html
    2KB
  • App/views/directives/progress_diagnostic_data.html
    1KB
  • App/views/directives/pulsar.html
    1KB
  • App/views/directives/purchase.html
    10KB
  • App/views/directives/regions.html
    2KB
  • App/views/directives/regions_lock.html
    1KB
  • App/views/directives/register.html
    6KB
  • App/views/directives/sent_diagnostic_data.html
    2KB
  • App/views/directives/settings.html
    1KB
  • App/views/directives/start_diagnostic_data.html
    4KB
  • App/views/directives/status.html
    851B
  • App/views/directives/switch.html
    421B
  • App/views/directives/theme_selection.html
    4KB
  • App/views/directives/traffic.html
    264B
  • App/views/directives/trial.html
    464B
  • App/views/directives/waiting_window.html
    969B
  • App/views/directives/whitelabel_loc.html
    203B
  • App/views/directives/wifi.html
    2KB
  • Avira.Acp.Common.dll
    .dll 17KB
  • Avira.Acp.Resources.dll
    .dll 54KB
  • Avira.Acp.dll
    .dll 154KB
  • Avira.Common.Acp.AppClient.dll
    .dll 46KB
  • Avira.Common.Core.dll
    .dll 70KB
  • Avira.Messaging.dll
    .dll 48KB
  • Avira.NetworkBlocker.exe
    .exe 231KB
  • Avira.VPN.Acp.dll
    .dll 33KB
  • Avira.VPN.Core.dll
    .dll 155KB
  • Avira.VPN.Core.dll.config
    2KB
  • Avira.VPN.Notifier.exe
    .exe 31KB
  • Avira.VPN.Notifier.exe.config
    1KB
  • Avira.VPN.NotifierClient.dll
    .dll 29KB
  • Avira.VPN.OeConnector.dll
    .dll 42KB
  • Avira.VpnService.exe
    .exe 395KB
  • Avira.VpnService.exe.config
    8KB
  • Avira.WebAppHost.exe
    .exe 824KB
  • Avira.WebAppHost.exe.config
    3KB
  • Certificates/avira.cer
    1KB
  • Defaults/ProductSettings.json
    1KB
  • JWT.dll
    .dll 61KB
  • Messaging.dll
    .dll 38KB
  • Newtonsoft.Json.dll
    .dll 701KB
  • OpenVpn/TAP/win10/amd64/OemVista.inf
    7KB
  • OpenVpn/TAP/win10/amd64/phantomtap.cat
    11KB
  • OpenVpn/TAP/win10/amd64/phantomtap.sys
    .sys 52KB
  • OpenVpn/TAP/win10/amd64/tapinstall.exe
    .exe 595KB
  • OpenVpn/TAP/win10/arm64/OemVista.inf
    7KB
  • OpenVpn/TAP/win10/arm64/phantomtap.cat
    11KB
  • OpenVpn/TAP/win10/arm64/phantomtap.sys
    61KB
  • OpenVpn/TAP/win10/arm64/tapinstall.exe
    135KB
  • OpenVpn/TAP/win10/i386/OemVista.inf
    7KB
  • OpenVpn/TAP/win10/i386/phantomtap.cat
    10KB
  • OpenVpn/TAP/win10/i386/phantomtap.sys
    .sys 42KB
  • OpenVpn/TAP/win10/i386/tapinstall.exe
    .exe 393KB
  • OpenVpn/TAP/win7/amd64/OemVista.inf
    7KB
  • OpenVpn/TAP/win7/amd64/phantomtap.cat
    9KB
  • OpenVpn/TAP/win7/amd64/phantomtap.sys
    .sys 38KB
  • OpenVpn/TAP/win7/amd64/tapinstall.exe
    .exe 482KB
  • OpenVpn/TAP/win7/i386/OemVista.inf
    7KB
  • OpenVpn/TAP/win7/i386/phantomtap.cat
    8KB
  • OpenVpn/TAP/win7/i386/phantomtap.sys
    .sys 33KB
  • OpenVpn/TAP/win7/i386/tapinstall.exe
    .exe 393KB
  • OpenVpn/VpnClient.ovpn
    17KB
  • OpenVpn/doc/license.txt
    27KB
  • OpenVpn/libcrypto-3.dll
    .dll 6.3MB
  • OpenVpn/libssl-3.dll
    .dll 1.5MB
  • OpenVpn/phantomvpn.exe
    .exe 1.3MB
  • Serilog.Enrichers.Process.dll
    .dll 17KB
  • Serilog.Enrichers.Thread.dll
    .dll 17KB
  • Serilog.Sinks.File.dll
    .dll 37KB
  • Serilog.dll
    .dll 153KB
  • ServiceStack.Text.dll
    .dll 199KB
  • SharpRaven.dll
    .dll 103KB
  • System.Diagnostics.DiagnosticSource.dll
    .dll 172KB
  • System.Runtime.InteropServices.RuntimeInformation.dll
    .dll 28KB
  • Templates/Kievit-Light.woff
    54KB
  • Templates/KievitCompPro-Light.woff
    54KB
  • Templates/Template0.html
    .html 765B
  • Templates/Template1.html
    .html 906B
  • Templates/Template2.html
    .html 961B
  • Templates/TemplateEducationMessage.html
    .html 1KB
  • Templates/TemplateVpn2.html
    .html 2KB
  • Templates/TemplateVpn3.html
    .html 2KB
  • Templates/TemplateVpnMessagWithCaption.html
    .html 1KB
  • Templates/TemplateVpnMessage.html
    .html 1KB
  • Templates/TemplateWarningNoHint.html
    .html 1KB
  • Templates/avira-icons.woff
    14KB
  • Templates/educationMessage.css
    1KB
  • Templates/ftu.css
    3KB
  • Templates/ftu.html
    .html 2KB
  • Templates/ftu.js
    .js 2KB
  • Templates/images/FTU-gfx-screen-1.png
    .png 10KB
  • Templates/images/FTU-gfx-screen-2.png
    .png 29KB
  • Templates/images/FTU-gfx-screen-3.png
    .png 8KB
  • Templates/images/FTU-vpn-logo.png
    .png 1KB
  • Templates/images/IPM-header.png
    .png 3KB
  • Templates/images/VPN.png
    .png 2KB
  • Templates/images/alert-orange.png
    .png 5KB
  • Templates/images/alert-red.png
    .png 5KB
  • Templates/images/alert.png
    .png 918B
  • Templates/images/checkmark.png
    .png 1KB
  • Templates/images/feedback.png
    .png 19KB
  • Templates/images/header_edu-transparent.png
    .png 5KB
  • Templates/images/horzLine.png
    .png 75B
  • Templates/images/info.png
    .png 1KB
  • Templates/images/lock.png
    .png 7KB
  • Templates/images/logo.png
    .png 2KB
  • Templates/images/onlineprivacy.png
    .png 15KB
  • Templates/images/traveler.png
    .png 87KB
  • Templates/images/vpn-gray.svg
    .svg 735B
  • Templates/notifier.css
    1KB
  • Templates/notifierAvira.css
    3KB
  • Third-Party Attributions.txt
    50KB
  • VPN.Core.dll
    .dll 189KB
  • de-DE/Avira.VpnService.resources.dll
    .dll 24KB
  • en-US/Avira.VpnService.resources.dll
    .dll 23KB
  • es-ES/Avira.VpnService.resources.dll
    .dll 23KB
  • fr-FR/Avira.VpnService.resources.dll
    .dll 23KB
  • it-IT/Avira.VpnService.resources.dll
    .dll 23KB
  • ja-JP/Avira.VpnService.resources.dll
    .dll 25KB
  • nl-NL/Avira.VpnService.resources.dll
    .dll 23KB
  • pt-BR/Avira.VpnService.resources.dll
    .dll 23KB
  • ru-RU/Avira.VpnService.resources.dll
    .dll 26KB
  • tr-TR/Avira.VpnService.resources.dll
    .dll 23KB
  • uninstaller.exe
    .exe 254KB
  • $PLUGINSDIR/FindProcDLL.dll
    .dll 3KB
  • $PLUGINSDIR/INetC.dll
    .dll 21KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/base64.dll
    .dll 40KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 70KB
  • $PLUGINSDIR/nsisXML.dll
    .dll 12KB
  • zh-CN/Avira.VpnService.resources.dll
    .dll 23KB
  • zh-TW/Avira.VpnService.resources.dll
    .dll 23KB

VpnInstaller.exe

  • IMPHASH 9a16e282eba7cc710070c0586c947693
  • SHA256 84e7c2d32cbb0b1546c14fe3f7fbceb36ca143dbae8f19fb03f91f7a4a42d8ba
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9f:70:b8:8f:8c:5a:95:af:1a:7a:0d:de:44:2b:b1:4c:12:f5:84:7a:ff:10:d1:fa:02:e9:0e:09:fe:9b:5c:a3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=HRB 742261,CN=Avira Operations GmbH,O=Avira Operations GmbH,ST=Baden-Württemberg,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024445
Minor OS version
0
Major OS version
4
Entry point
13277
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths