Gridinsoft Logo
File Icon

The Avira Phantom VPN Pro 2.44.1.19908.exe (Avira Phantom VPN Pro 2.44.1.19908 Setup) File Analysis

Updated 9 months ago
Checked by Malware Check
Avira Phantom VPN Pro 2.44.1.19908.exe

Technical Analysis

File Name Avira Phantom VPN Pro 2.44.1.19908.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
98304:w0FHAF/aUuvI2peNyoiOC+uWiOqXL6cY9J54jqrZwY8v:xFHAFdCpwy+PeOZ9J5v2YQ
Scanner Version 1.0.191.174
Database Version 2024-09-30 06:00:27 UTC
⚠

Suspicious File Detected

Detected by 35 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
47%
Detection Rate
5,408,170
File Size (bytes)
35/74
Engines Detected
2024-09-30
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
0fe5732c15e8150c8f107a0e73db4e45
SHA1
a3b4e14d09b82d365dbf52480854e399b2672f34
SHA256
940ec4012984218f6e314d793c995b3cb3c3366aabba0308fece77fe2ed7abb7
SHA512
2cedc194be8ec37a7d035bcf4af42ea74a6a51fa220ea2d9edc406ae5a7b4dea022f1287c09a22f59a552e23a20730821184434cee2879371db0a78897d0e292
ImpHash
483f0c4259a9148c34961abbda6146c1

Security Engines with Detections (35 of 74)

Bkav
W32.AIDetectMalware Malicious
Lionic
Hacktool.Win32.Crack.3!c Malicious
AVG
Win32:Malware-gen Malicious
MicroWorld-eScan
Application.Generic.3722226 Malicious
CAT-QuickHeal
Hacktool.Crack Malicious
Skyhigh
BehavesLike.Win32.Dropper.tc Malicious
McAfee
Artemis!0FE5732C15E8 Malicious
Cylance
Unsafe Malicious
Sangfor
Hacktool.Win32.Agent.Viz1 Malicious
K7AntiVirus
Riskware ( 00584baa1 ) Malicious
K7GW
Riskware ( 00584baa1 ) Malicious
Cybereason
malicious.c15e81 Malicious
Arcabit
Application.Generic.D38CBF2 Malicious
Symantec
Trojan.Gen.MBT Malicious
Avast
Win32:Malware-gen Malicious
BitDefender
Application.Generic.3722226 Malicious
Emsisoft
Application.Generic.3722226 (B) Malicious
VIPRE
Application.Generic.3722226 Malicious
McAfeeD
ti!940EC4012984 Malicious
FireEye
Application.Generic.3722226 Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
Webroot
W32.Hacktool.Crack Malicious
Varist
W32/ABApplication.XXJY-8626 Malicious
MAX
malware (ai score=72) Malicious
Microsoft
HackTool:Win32/crack Malicious
GData
Application.Generic.3722226 Malicious
Google
Detected Malicious
ALYac
Application.Generic.3722226 Malicious
Malwarebytes
Malware.AI.4056476136 Malicious
Ikarus
PUA.HostBlocker Malicious
MaxSecure
Trojan.Malware.219204485.susgen Malicious
Fortinet
Riskware/Application Malicious
DeepInstinct
MALICIOUS Malicious
CrowdStrike
win/grayware_confidence_70% (D) Malicious
alibabacloud
Trojan:Win/Crack.Gen Malicious
39 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 77c5e92536c5aa4a9b436127ea715e5b
Fuzzy: d312e154cf40b73d7b8be2d34bf07042
dHash: e88e968c8c8e8cb2
Image Base 0x00400000
Entry Point 0x00416478
Compilation Time 2012-10-02 05:04:04
Checksum 0x00000000 (Actual: 0x00532844)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature The PE file does not contain a certificate table.
Imports 5 libraries
oleaut32, advapi32, user32, kernel32, comctl32
Exports 0 functions
Resources 19 Resources
Sections 8 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName Avira Operations GmbH & Co. KG
FileDescription Avira Phantom VPN Pro 2.44.1.19908 Setup
FileVersion 2.44.1.19908
LegalCopyright
ProductName Avira Phantom VPN Pro 2.44.1.19908
ProductVersion 2.44.1.19908
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 82,936 bytes 82,944 bytes 6.48 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 345DB2B6911ADDC85B53F32245F969A0
.itext 0x00016000 3,048 bytes 3,072 bytes 6.02 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 2E74D968CAEDEB2D71B9505530D43907
.data 0x00017000 3,484 bytes 3,584 bytes 2.52 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A086B553253E4F1C3AE0402CD8088324
.bss 0x00018000 22,352 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x0001e000 3,998 bytes 4,096 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B47EACA4C149EE829DE76A342B5560D5
.tls 0x0001f000 8 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x00020000 24 bytes 512 bytes 0.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3746F5876803F8F30DB5BB2DEB8772AE
.rsrc 0x00021000 153,396 bytes 153,600 bytes 3.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 37AAA4AB8E9470EDF62F47CB77D5077A

Resource Analysis

▼
Total Resources: 19 (152,242 bytes)
Resource Type Count Total Size Percentage
RT_ICON 6 112,158 bytes
73.7%
RT_STRING 6 3,200 bytes
2.1%
RT_RCDATA 4 34,004 bytes
22.3%
RT_GROUP_ICON 1 90 bytes
0.1%
RT_VERSION 1 1,208 bytes
0.8%
RT_MANIFEST 1 1,582 bytes
1%

Certificate Chain Analysis

▼
Certificate Information
Product Avira Phantom VPN Pro 2.44.1.19908
Description Avira Phantom VPN Pro 2.44.1.19908 Setup
File Version 2.44.1.19908

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
35 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware