home

bvpn.exe

bVPN

COÖPERATIE ISPIRE HOLDING U.A

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘bVPN’.
Publisher:
bVPN Service  (signed by COÖPERATIE ISPIRE HOLDING U.A)

Product:
bVPN

Version:
1,7,0

MD5:
608c11d4e68e7576a78ed7d169d12988

SHA-1:
876526a32583621d8a8dbf83f49bb9564fb210c5

SHA-256:
9f041b16425b2af8912cf13a2201b9db285e63d8c37401a8f9164d25a47b70c4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:22:21 PM UTC  (today)

File size:
1.1 MB (1,110,944 bytes)

Product version:
1,7,0

Copyright:
(c)2015 bVPN All rights reserved.

Original file name:
bvpn.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\bvpn service\bvpn\bvpn.exe

Digital Signature
Signed by:
COÖPERATIE ISPIRE HOLDING U.A

Authority:
COMODO CA Limited

Valid from:
5/27/2015 3:00:00 AM

Valid to:
5/27/2018 2:59:59 AM

Subject:
CN=COÖPERATIE ISPIRE HOLDING U.A, O=COÖPERATIE ISPIRE HOLDING U.A, STREET=Takkebijsters 15E, S=Breda, PostalCode=4817 BL, C=NL

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
53F02EFE7DBB273C26673CD3BD41A0D2

File PE Metadata
Compilation timestamp:
10/22/2015 9:46:08 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:InYDLKcvZOinl6THSb75GAOj9rZfOU5A/+Nv+f3lp9liAPxgVNp:InYDLKcxO9ybcjNgU5AWQfH9QGgVNp

Entry address:
0x26D8E

Entry point:
E8, 90, 04, 00, 00, E9, 63, FD, FF, FF, FF, 25, C0, 70, 43, 00, FF, 25, BC, 70, 43, 00, FF, 25, B8, 70, 43, 00, CC, CC, CC, CC, CC, CC, 68, 09, 6E, 42, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 28, AB, 4A, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC...
 
[+]

Entropy:
6.4673

Code size:
216 KB (221,184 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
bVPN

Command:
"C:\Program Files\bvpn service\bvpn\bvpn.exe"


Scan bvpn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.