home

totalvpn.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from my.totalvpn.com.
MD5:
bc7b8acb3561d5d20cbba281e81c791b

SHA-1:
027fb9b9d1b59985088605c6481ba73c61556042

SHA-256:
7d045aa7a0435defaa7dc5dd0248b95685f4302324be9d3eef72cb6131c074cf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:53:25 PM UTC  (today)

File size:
6.5 MB (6,786,960 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\totalvpn.exe

File PE Metadata
Compilation timestamp:
5/11/2014 8:03:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:wvQp3QpPISFfkmS/FzmG7sUgVRawEBr8tnGl2TnUMRNg/nkfxsHGEsf5vKZwYg0Y:86KGsUKowQr8t3BRNCnjGEsBvkwYfvCP

Entry address:
0x3217

Entry point:
89, EB, 8D, 15, DA, 28, 9B, 7C, 69, F2, 35, 47, 7C, 0A, 89, F3, 8D, 2D, BA, 68, D4, 03, 08, E0, B5, 75, 68, 68, 85, 6A, 00, 08, C3, FE, C7, 85, FD, 70, 03, 89, C9, 47, 0A, EF, 84, E5, E8, 1A, 00, 00, 00, FF, C5, 69, FA, 8F, BB, A5, E4, FE, C7, 09, F6, F2, 72, 05, 87, C1, C6, C3, A0, 81, FA, A0, 7A, 00, 00, EB, 0B, FE, C0, 81, D8, 84, 2E, 97, 4E, 0F, B7, FE, 78, 05, 46, 0F, BE, D4, 4D, 0F, B6, C1, 56, 0F, AF, C7, 59, 4D, 58, 78, 01, 42, 8A, DA, 18, E3, EB, 08, F7, C0, 1B, 35, 4A, 3B, 8B, EF, 86, FA, 84, C1...
 
[+]

Code size:
23 KB (23,552 bytes)

The file totalvpn.exe has been seen being distributed by the following URL.

https://my.totalvpn.com/download

Scan totalvpn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.