» iwasel_pro.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

iwasel_pro.exe

iWASEL Pro

COÖPERATIE ISPIRE HOLDING U.A

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘iWASEL Pro’. This is installed with iWASEL Pro.

File name:

iwasel_pro.exe

Publisher:

iWASEL VPN Service (signed by COÖPERATIE ISPIRE HOLDING U.A)

Product:

iWASEL Pro

Version:

1,8,0

MD5:

73caf7c1af3ef9ba77869816b30d02b4

SHA-1:

d621f86989e0dc591fe5599f4ec8c3b711eccc87

SHA-256:

d54bbd91f563a5532e1a6a5f16325ee44ac9b47f3ac947f28fe97755f2c76f64

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/28/2024 9:29:30 AM UTC (today)

File size:

780.4 KB (799,176 bytes)

Product version:

1,8,0

Original file name:

iWASEL.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\iwasel vpn service\iwasel pro\iwasel_pro.exe

Digital Signature

Signed by:

COÖPERATIE ISPIRE HOLDING U.A

Authority:

COMODO CA Limited

Valid from:

8/9/2016 3:00:00 AM

Valid to:

5/27/2018 2:59:59 AM

Subject:

CN=COÖPERATIE ISPIRE HOLDING U.A, OU=bVPN, O=COÖPERATIE ISPIRE HOLDING U.A, STREET=Takkebijsters 15E, L=Breda, S=Breda, PostalCode=4817 BL, C=NL

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00D714C00617CE7A52BFCCD9B0CABA57CC

File PE Metadata

Compilation timestamp:

8/10/2016 10:23:23 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:wbCfSexSJ/6i75urU3P0rmD4I6J4SgoXNmrJY:wbCfSexSJx5ok9DjE4SpXNb

Entry address:

0x26CCE

Entry point:

E8, 90, 04, 00, 00, E9, 63, FD, FF, FF, FF, 25, C0, 60, 43, 00, FF, 25, BC, 60, 43, 00, FF, 25, B8, 60, 43, 00, CC, CC, CC, CC, CC, CC, 68, 49, 6D, 42, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 28, 6B, 4B, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC... 
[+]

Entropy:

6.9844

Code size:

211 KB (216,064 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

iWASEL Pro

Command:

"C:\Program Files\iwasel vpn service\iwasel pro\iwasel_pro.exe"

The file iwasel_pro.exe has been discovered within the following program.

iWASEL Pro by iWASEL VPN Service

iwasel.com

About 8% of users remove it

Scan iwasel_pro.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.