EchoTrail

WatchGuard Mobile VPN with SSL 2026.4

by WatchGuardinstaller signed by WatchGuard Technologies, Inc.Valid

Sources: observed in the EchoTrail lab on Windows 11 on November 2, 2026.

The install

Installer
wg-mvpn-ssl_2026_4.exe
Installer type
inno
Installed through
a type-detected silent switch
Install directory
C:\Program Files (x86)\WatchGuard
Launched
wgsslvpnc.exe
Windows
Windows 11
Date
November 2, 2026
Executables dropped
15

installer sha256 90d920be8ef9cc4f819d6cd3b4b51402f5b1c6c2c23928c3c58c879aa5c70d3b

The lab used WatchGuard Mobile VPN with SSL for 1 minute, changed a setting, then rebooted and watched what came back.

On screen

Frames from the lab session, cropped to WatchGuard Mobile VPN with SSL's own windows.

WatchGuard Mobile VPN with SSL 2026.4: First window
First window. WatchGuard Mobile VPN with SSL login dialog showing Server, username, password fields and Connect/Cancel buttons.
WatchGuard Mobile VPN with SSL 2026.4: Main window
Main window. WatchGuard Mobile VPN with SSL login dialog with empty Server, User name and Password fields, Automatically reconnect checked.

What it dropped

Executables

  • libcrypto-3.dll
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\libcrypto-3.dll
  • libssl-3.dll
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\libssl-3.dll
  • openvpn.exesigned by CN=OpenVPN Inc., O=OpenVPN Inc., L=Pleasanton, S=California, C=US, SERIALNUMBER=3761256, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=USValidran during the lab session
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\openvpn.exe
    sha256 d7e36683803d8029ad81e383db9013c11a98fd1a81a5219e4536a3f75dd6a15f
  • wgsslvpnc.exesigned by CN="WatchGuard Technologies, Inc.", O="WatchGuard Technologies, Inc.", S=Washington, C=USValidran during the lab session
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpnc.exe
    sha256 28ce9577be9f8ec05b7fb13c9885ad48aaeee77eefed4c0bfee54fd84efe37ac
  • unins000.exe
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\unins000.exe
  • msvcr90.dll
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\msvcr90.dll
  • msvcp90.dll
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\msvcp90.dll
  • devcon.exesigned by CN=OpenVPN Inc., O=OpenVPN Inc., L=Pleasanton, S=California, C=US, SERIALNUMBER=3761256, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=USValidran during the lab session
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\devcon.exe
    sha256 b6b33f4cd19c606e4c616f08c11fd4ae775accb24b78ef66eb31c279ca403381
  • msvcm90.dll
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\msvcm90.dll
  • wgsslvpncfra.dll
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpncFRA.dll
  • wgsslvpncenu.dll
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpncENU.dll
  • wgsslvpncjpn.dll
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpncJPN.dll
  • wgsslvpnsrc.exesigned by CN="WatchGuard Technologies, Inc.", O="WatchGuard Technologies, Inc.", S=Washington, C=USValidran during the lab session
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpnsrc.exe
    sha256 9b4efdbeb84cc5d6955b46cdbea6fd1bcda93733e0e7cda751b3058fe96bc574
  • libpkcs11-helper-1.dll
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\libpkcs11-helper-1.dll
  • tap0901.sys
    C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\tap0901.sys

After the reboot

Autostart entries

  • service: wgsslvpnsrc"C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpnsrc.exe"