home

kancelariavpn.exe

Smart VPN Client

Draytek Corp.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SmartVpnClient’.
Publisher:
Draytek Corp.  (signed and verified)

Product:
Smart VPN Client

Version:
4.1.0.1

MD5:
b2012ef9f2014649106dae1485aa50c8

SHA-1:
976dbaccb3303d0cb6ec06c4326f2f3b3b1d19ea

SHA-256:
7fec5238888b77e4effd19515c59c136a6cbe9fea27cc757c9078c26ed5a6e43

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:04:57 AM UTC  (today)

File size:
2.1 MB (2,173,184 bytes)

Product version:
4.1.0.1

Copyright:
DrayTek Corp. All rights reserved.

Original file name:
SmartVPNClient.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\draytek\smart vpn client\kancelariavpn.exe

Digital Signature
Signed by:
Draytek Corp.

Authority:
DigiCert Inc

Valid from:
9/19/2012 2:00:00 AM

Valid to:
9/24/2013 2:00:00 PM

Subject:
CN=Draytek Corp., O=Draytek Corp., L=Hsinchu, C=TW

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
04A4578BBFEFCDEADBBC8F8798495B3E

File PE Metadata
Compilation timestamp:
11/8/2012 6:41:56 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:ZbLvyX6iSml/TzZ+4LY18qoexu6pnKPDmE:ZbD4XLzhY18TexuaTE

Entry address:
0x141B2A

Entry point:
E8, A7, C5, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, 00, 9A, 5E, 00, 75, 02, F3, C3, E9, 27, C6, 00, 00, 6A, 0C, 68, F8, A7, 5D, 00, E8, 1D, 91, 00, 00, 83, 65, E4, 00, 8B, 75, 08, 3B, 35, E0, 52, 5F, 00, 77, 22, 6A, 04, E8, 7F, C8, 00, 00, 59, 83, 65, FC, 00, 56, E8, C1, D0, 00, 00, 59, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 09, 00, 00, 00, 8B, 45, E4, E8, 29, 91, 00, 00, C3, 6A, 04, E8, 7C, C7, 00, 00, 59, C3, 55, 8B, 6C, 24, 08, 83, FD, E0, 0F, 87, 9F, 00, 00, 00, 53, 8B, 1D, D4, C3, 57, 00, 56, 57, 33...
 
[+]

Code size:
1.5 MB (1,552,384 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SmartVpnClient

Command:
C:\Program Files\draytek\smart vpn client\kancelariavpn.exe autorun


Scan kancelariavpn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.