home

IswDashBoard.exe

Internet SagiWall

BB Softservice Corp.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘IswDashBoard’.
Publisher:
BB Softservice Corp.  (signed and verified)

Product:
Internet SagiWall

Description:
Internet SagiWall DashBoard

Version:
3.0.0.0

MD5:
0297082e8052fdc45b61eb7bcad9cac9

SHA-1:
471072cb6f6bd81f4889439adf622226e99ef357

SHA-256:
aaa7fc2abf5cafcae4b9e7e664b977e2fe1165a2a612097bf12b617a8e8976df

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 3:00:44 PM UTC  (today)

File size:
1.2 MB (1,227,296 bytes)

Product version:
3.0.0.0

Copyright:
Copyright (C) BB Softservice Corp. All rights reserved.

Original file name:
IswDashBoard.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\securebrain\internet sagiwall\iswdashboard.exe

Digital Signature
Signed by:
BB Softservice Corp.

Authority:
Symantec Corporation

Valid from:
12/26/2014 9:00:00 AM

Valid to:
1/27/2016 8:59:59 AM

Subject:
CN=BB Softservice Corp., OU=Business Division, O=BB Softservice Corp., L=Minato-ku, S=Tokyo, C=JP

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
51EA5870844C1C1CB15BF3E0DB74FFF5

File PE Metadata
Compilation timestamp:
10/2/2015 7:16:10 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:CbIYo5m5PFcgiofSgVI5i0m5PFcgiofSk8Xnzm5PFcgiofSwLr3xu7:CMYi0b/y800bynz0bFHk

Entry address:
0xCF93E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
3.7116

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
822.5 KB (842,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
IswDashBoard

Command:
C:\Program Files\securebrain\internet sagiwall\iswdashboard.exe


Scan IswDashBoard.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.