» wasel_pro.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

wasel_pro.exe

WASEL Pro

Dari International

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WASEL Pro’. This is installed with WASEL Pro.

File name:

wasel_pro.exe

Publisher:

WASEL Pro VPN Service (signed by Dari International)

Product:

WASEL Pro

Version:

1,1,7

MD5:

7a933bb348732356263377f8aea0ac22

SHA-1:

f5cd0ed2897f34203def8b129e19c3c1db4f07b4

SHA-256:

18a47500c71415ded44254ba3ce28d274b49d59360c1eada4e2f3a39dcb00a59

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 3:50:14 AM UTC (today)

File size:

1.8 MB (1,871,288 bytes)

Product version:

1,1,7

Original file name:

wasel_pro.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\wasel pro vpn service\wasel pro\wasel_pro.exe

Digital Signature

Signed by:

Dari International

Authority:

COMODO CA Limited

Valid from:

3/8/2012 4:00:00 AM

Valid to:

3/9/2017 3:59:59 AM

Subject:

CN=Dari International, O=Dari International, STREET=Irene Vorrinkstraat 269, L=Nijmegen, S=Gelderland, PostalCode=6535NA, C=NL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00BB74D227A623223023771D1D334BEAF8

File PE Metadata

Compilation timestamp:

8/31/2013 11:50:56 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:usl5czU8rycjfmfR5CxFkvE4TmfR5CxYMmfR5Cxh4bmY:WU8rb7mWuRTmWFmWn9Y

Entry address:

0x2152E

Entry point:

E8, 90, 04, 00, 00, E9, 63, FD, FF, FF, FF, 25, B4, E0, 42, 00, FF, 25, B0, E0, 42, 00, FF, 25, AC, E0, 42, 00, CC, CC, CC, CC, CC, CC, 68, A9, 15, 42, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 6C, AA, 56, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC... 
[+]

Entropy:

6.3253

Code size:

176.5 KB (180,736 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

WASEL Pro

Command:

"C:\Program Files\wasel pro vpn service\wasel pro\wasel_pro.exe"

The file wasel_pro.exe has been discovered within the following program.

WASEL Pro by WASEL Pro VPN Service

waselpro.com

About 1% of users remove it

Scan wasel_pro.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.