Should I block it?

No, this file is 100% safe to run.

Additional versions

6ff6e	90.00%
8c02b	10.00%

(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child processes

capiws.exe

Remove capiws.exe

MD5:	6ff6ef1cc25e558cf0335928b658d11e
SHA1:	13ea7893bf525a1c0a39ff7786a4deccf14341b4
SHA256:	f056ad4168198a07978ee68c10b30f3e067cdd9dc06011ef330a6f36ab9964d4

What is capiws.exe?

OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol. OpenVPN can be extended with third-party plug-ins or scripts which can be called at defined entry points.

Overview

capiws.exe runs as a service under the name OpenVPN Access Client (OpenVPNAccessClient) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including OpenVPN Connect published by OpenVPN Technologies and PrivateTunnel published by OpenVPN Technologies.

Details

File name:	capiws.exe
Typical file path:	C:\Program Files\openvpn technologies\openvpn client\core\capiws.exe
Size:	23.5 KB (24,064 bytes)
Digital DNA
PE subsystem:	Windows Console
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Programs

The following programs will install this file

OpenVPN Connect

OpenVPN Technologies

3% remove

OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. OpenVPN allows peers to authenticate each other using a pre-shared secret key, certificates, or username/password. When used in a multiclient-server configuration, it allows the server to release an authenti...

PrivateTunnel

OpenVPN Technologies

4% remove

“Accessibility to any web content should be the right of every human being across the globe no matter where they live. Many countries have imposed policies to block their citizens from basic rights to access specific web content on the Internet. China and some countries in the Middle East are among those countries that block Facebook and Twitter. Private Tunnel supports advanced methods to circumvent such restrictions to provide accessib...”

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'OpenVPNAccessClient' (OpenVPN Access Client)
OpenVPNAccessClient

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00010960%	0.028634%
Kernel CPU:	0.00004501%	0.013761%
User CPU:	0.00006459%	0.014873%
Kernel CPU time:	115,332 ms/min	100,923,805ms/min
CPU cycles:	2,721,068/sec	17,470,203/sec
Context switches:	3/sec	284/sec
Memory
Private memory:	22.74 MB	21.59 MB
Private (maximum):	23.39 MB
Private (minimum):	20.02 MB
Non-paged memory:	22.74 MB	21.59 MB
Virtual memory:	85.42 MB	140.96 MB
Virtual memory (peak):	89.31 MB	169.69 MB
Working set:	21.1 MB	18.61 MB
Working set (peak):	27.04 MB	37.95 MB
Page faults:	161,403/min	2,039/min
I/O
I/O read transfer:	2.03 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	47 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	6.37 KB/sec	448.09 KB/min
I/O other operations:	330/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	252	600

Process properties

Integrety level:	System
Platform:	64-bit
Command lines:	"C:\Program Files\openvpn technologies\openvpn client\core\capiws.exe" "C:\Program Files\openvpn technologies\privatetunnel\core\capiws.exe"
Owner:	SYSTEM
Windows Service
Service name:	OpenVPNAccessClient
Display name:	OpenVPN Access Client
Description:	“OpenVPN Access Client”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

sechost.dll
Total CPU:	0.06335687%	0.272967%
Kernel CPU:	0.02060630%	0.107585%
User CPU:	0.04275056%	0.165382%
CPU cycles:	7,432,264/sec	5,741,424/sec
Context switches:	14/sec	79/sec
Memory:	100 KB	1.16 MB
wow64.dll
Total CPU:	0.02946881%
Kernel CPU:	0.00911168%
User CPU:	0.02035714%
CPU cycles:	1,550,688/sec
Context switches:	2/sec
Memory:	252 KB
capiws.exe (main module)
Total CPU:	0.00016789%
Kernel CPU:	0.00002518%
User CPU:	0.00014271%
CPU cycles:	4,757/sec
Memory:	40 KB