[CyberiaSage]

I´m sure you have heard about ProtonVPN.

It´s very good and intuitive.

It does what it was made for and it is very efficient at it.

I hope you do Enjoy!

PASSWORD: freesoft

Download here
Removed- Staff.

VT link: https://www.virustotal.com/gui/file/e0c9.../detection

[mothered]

I've used ProtonVPN for a while and must say, It's very stable and responsive.

Please provide the VT report of the executable file.

[acuvor]

Thank you for sharing this soft with us. Nice job.

---

The VT report is for the .rar file...
The .exe report doesn't have the same result.

[Drako]

This could be infected with a RAT. Here's the real VT scan of the executable, not the compressed RAR file.

https://www.virustotal.com/gui/file/39b7.../detection

It's probably best for @miso to check this one out.

[mothered]

Here's the real VT scan of the executable, not the compressed RAR file.

https://www.virustotal.com/gui/file/39b7.../detection

This Is a prime example of why I ask for the executable to be scanned, and not the archive.

At the time of this post, 0/57 on the archive and 26/69 on the exe file.

[miso]

@mothered , malware (RAT)

ive dmed this report to @Drako a few weeks ago, here it is for anyone to look at

Code:

ProtonVPN_v1.16.1.exe | Source File Type: WinRAR SFX (No Passwords) Files (2) |- Installer.lnk |- Path To: "C:\Users\Administrator\Downloads\ProtonVPN_win_v1.16.1 - Cracked.to\ProtonVPN_win_v1.16.1 - Cracked.to\ProtonVPN_win_v1.16.1.exe" |- process.exe --------------- process.exe Type: NSIS (v2.51) Files (2) |- InstallOptions.dll |- tzz7rp.dll --------------- InstallOptions.dll Type: MCSV C++ 6.0 Timestamp: Sat, 02 Apr 2016 03:19:48 UTC PDB Path: Unknown Possible Use: Captures user actions - Get/Set Window Rectangle (Size of window) - Get/Set Window Position - Get/Set Window Title - Get/Set Current Directory - Get/Set Text Color - Get System Menu - Read/Write INI File (Target File is unknown) - Read/Write File (Target File is unknown) - Enable/Disable Window --------------- tzz7rp.dll Type: <Unknown> C++ DLL Possible Use: Captures user actions Timestamp: Fri, 19 Mar 2021 20:35:02 UTC PDB Path: C:\xampp\htdocs\Cryptor\226ec38c03034365b89f428589431473\Loader\Loader\Release\5yqqtk9ho.pdb - ClipBanker { - 0xC0C : "OleGetClipboard" // Retrieves Clipboard } - URLDownload { - WebClient: Internet Explorer - Contacts: Unknown - Contains FTP Calls (0xCFA : "FtpFindFirstFileA", 0xD0E : "FtpRemoveDirectoryW") - Other { - 0xC72 : "URLDownloadA" // Downloads files (Win32.Dropper) - 0xC82 : "URLDownloadToCacheFileA" // Downloads files into cache (Win32.Dropper) - 0xC9C : "URLDownloadToCacheFileW" // Downloads files into cache (Win32.Dropper) - 0xCCE : "DeleteIE3Cache" // Clears Internet Explorer Cache } }

[mothered]

Thanks @miso.

The link has been removed.