ExpressVPN file reports

ExpressVPN

ExpressVPN appears as a company name in ThreatInfo file metadata. The table below lists the latest 9 files connected with this company value, their current detection status, product metadata, and last seen date.

Company metadata is useful for investigation, but it should not be trusted alone. Attackers can copy or forge version information, so compare the file hash, signature status, product name, and detection result before making a decision.

expressvpn_windows_10.0.9.2_re 027110b7867e77e7e3b9556eeb84628b Under review ExpressVPN8Produc 2021-02-06 04:12:15
expressvpn-browser-helper.exe e767b401bb7109c6f5907968c3945eb0 General Threat ExpressVPN Browser Helper 2022-10-22 23:33:23
Binary.nssm.exe_32 f9f9618c267f9a04b9a585ea096c87ee Under review NSSM 32-bit 2021-07-28 20:21:48
expressvpn-tun.sys ee0e1a5d9af83750bcd74dc3a44e48a1 Under review ExpressVPN Wintun Driver 2022-03-02 23:56:54
nssm.exe b6561771ab78a2928ef1037c9e74837b Under review NSSM 64-bit 2022-05-15 23:36:48
nssm.exe bfa077cdc4d18fc30189c0cf0220f3ff Under review NSSM 64-bit 2022-09-18 23:23:05
f47656728.exe f89b6fb6ea739ef459a55233ae6af0aa General Threat ExpressVPN 2023-06-14 23:12:51
expressvpn_12.66.0.24.exe 99fd6ccdbde55df3fc9bfa98946ed03c Possible Threat ExpressVPN 2023-12-16 23:54:00
Binary.SetKb3033929_File 90fdd774aecabb6f16e304be33797580 Trojan.Agent ExpressVPN 2026-03-26 23:00:45