» wasel_pro.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

wasel_pro.exe

WASEL Pro

Dari International

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WASEL Pro’. This is installed with WASEL Pro.

File name:

wasel_pro.exe

Publisher:

WASEL Pro VPN Service (signed by Dari International)

Product:

WASEL Pro

Version:

1,1,8

MD5:

e8fc5478132fe9f1cc935c4418e824f8

SHA-1:

c34b3c554af01e5fb5a98c04212f0eab4cbf669a

SHA-256:

9e05df93a0d7bb35be60b114cae527e44bd6a746ca475073748ecc4cc9479e1e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

2/25/2025 1:25:49 PM UTC (today)

File size:

1.8 MB (1,872,312 bytes)

Product version:

1,1,8

Original file name:

wasel_pro.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\wasel pro vpn service\wasel pro\wasel_pro.exe

Digital Signature

Signed by:

Dari International

Authority:

COMODO CA Limited

Valid from:

3/8/2012 12:00:00 AM

Valid to:

3/8/2017 11:59:59 PM

Subject:

CN=Dari International, O=Dari International, STREET=Irene Vorrinkstraat 269, L=Nijmegen, S=Gelderland, PostalCode=6535NA, C=NL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00BB74D227A623223023771D1D334BEAF8

File PE Metadata

Compilation timestamp:

9/23/2013 1:02:06 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:4jLvfOE2ycjfmfR5CxFkvE4TmfR5CxYPmfR5CxmjMw:HZb7mWuRTmWemW7w

Entry address:

0x2181E

Entry point:

E8, 90, 04, 00, 00, E9, 63, FD, FF, FF, FF, 25, B4, E0, 42, 00, FF, 25, B0, E0, 42, 00, FF, 25, AC, E0, 42, 00, CC, CC, CC, CC, CC, CC, 68, 99, 18, 42, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 6C, AA, 56, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC... 
[+]

Code size:

177.5 KB (181,760 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

WASEL Pro

Command:

"C:\Program Files\wasel pro vpn service\wasel pro\wasel_pro.exe"

The file wasel_pro.exe has been discovered within the following program.

WASEL Pro by WASEL Pro VPN Service

waselpro.com

About 1% of users remove it

Scan wasel_pro.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.