» wasel_pro.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

wasel_pro.exe

WASEL Pro

COÖPERATIE ISPIRE HOLDING U.A

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WASEL Pro’. This is installed with WASEL Pro.

File name:

wasel_pro.exe

Publisher:

WASEL Pro VPN Service (signed by COÖPERATIE ISPIRE HOLDING U.A)

Product:

WASEL Pro

Version:

1,8,0

MD5:

0b5065759452aacc9ddb277b787aa4a6

SHA-1:

607148d85913beb515c39bf4758684a1f49f3fb9

SHA-256:

27bc6bbd52abdb08080ddb5250974b32aa84a02033862390c8def0f83c6fe434

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/28/2024 9:25:13 AM UTC (today)

File size:

1.8 MB (1,936,328 bytes)

Product version:

1,8,0

Original file name:

wasel_pro.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\wasel pro vpn service\wasel pro\wasel_pro.exe

Digital Signature

Signed by:

COÖPERATIE ISPIRE HOLDING U.A

Authority:

COMODO CA Limited

Valid from:

8/9/2016 3:00:00 AM

Valid to:

5/27/2018 2:59:59 AM

Subject:

CN=COÖPERATIE ISPIRE HOLDING U.A, OU=bVPN, O=COÖPERATIE ISPIRE HOLDING U.A, STREET=Takkebijsters 15E, L=Breda, S=Breda, PostalCode=4817 BL, C=NL

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00D714C00617CE7A52BFCCD9B0CABA57CC

File PE Metadata

Compilation timestamp:

8/10/2016 10:30:10 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:nZnYAE0ycjfmfR5CxFkfDjE4TmfR5CxYXlmfR5CxpphBo:zb7mWaRTmWolmWto

Entry address:

0x26E4E

Entry point:

E8, 90, 04, 00, 00, E9, 63, FD, FF, FF, FF, 25, C0, 60, 43, 00, FF, 25, BC, 60, 43, 00, FF, 25, B8, 60, 43, 00, CC, CC, CC, CC, CC, CC, 68, C9, 6E, 42, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 28, 8B, 57, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC... 
[+]

Entropy:

6.3589

Code size:

211.5 KB (216,576 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

WASEL Pro

Command:

"C:\Program Files\wasel pro vpn service\wasel pro\wasel_pro.exe"

The file wasel_pro.exe has been discovered within the following program.

WASEL Pro by WASEL Pro VPN Service

waselpro.com

About 1% of users remove it

Scan wasel_pro.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.