home

IswDashBoard.exe

Internet SagiWall

BB Softservice Corp.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘IswDashBoard’.
Publisher:
BB Softservice Corp.  (signed and verified)

Product:
Internet SagiWall

Description:
Internet SagiWall DashBoard

Version:
3.0.1.0

MD5:
7c5acc3d13a485d9a3effe57690165da

SHA-1:
9d9102e45bc41f1046386a654db930b9aa54db53

SHA-256:
fa30ca5d92550eb4eae1ceb59c78efbc519fdb5a7e4017e7aa4c9b66cc4c983d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 7:04:48 PM UTC  (today)

File size:
1.2 MB (1,227,296 bytes)

Product version:
3.0.1.0

Copyright:
Copyright (C) BB Softservice Corp. All rights reserved.

Original file name:
IswDashBoard.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\securebrain\internet sagiwall\iswdashboard.exe

Digital Signature
Signed by:
BB Softservice Corp.

Authority:
Symantec Corporation

Valid from:
12/26/2014 9:00:00 AM

Valid to:
1/27/2016 8:59:59 AM

Subject:
CN=BB Softservice Corp., OU=Business Division, O=BB Softservice Corp., L=Minato-ku, S=Tokyo, C=JP

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
51EA5870844C1C1CB15BF3E0DB74FFF5

File PE Metadata
Compilation timestamp:
11/5/2015 4:04:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:5FUm5PFcgiofSgVI5i0m5PFcgiofSneEnQm5PFcgiofSwLr3xuX:520b/y800bSnQ0bFHg

Entry address:
0xCF9CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 78, 00, 00, 80, 10, 00, 00, 00, 90, 00, 00, 80, 18, 00, 00, 00, A8, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 07, 00, 02, 00, 00, 00, C0, 00, 00, 80, 03, 00, 00, 00, D8, 00...
 
[+]

Entropy:
3.7125

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
822.5 KB (842,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
IswDashBoard

Command:
C:\Program Files\securebrain\internet sagiwall\iswdashboard.exe


Scan IswDashBoard.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.