home

f-response-unow-worker.exe

F-Response Universal/Now Worker

Agile Risk Management LLC

Publisher:
Agile Risk Management LLC  (signed and verified)

Product:
F-Response Universal/Now™ Worker

Version:
2, 0, 1, 12

MD5:
1c825fea4df154d4d5fa6bbcbec6cc13

SHA-1:
64ce5314b284fa5ac3fbcb18c7a8d5cb55782d63

SHA-256:
e66a5f423e091905d748871e2338699a7a818aaa77a118a81a775ea617a58209

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/8/2024 5:09:44 AM UTC  (today)

File size:
651.5 KB (667,088 bytes)

Product version:
2, 0, 1, 12

Copyright:
Copyright Agile Risk Management LLC DBA F-Response, All Rights Reserved

Trademarks:
F-Response is a Trademark of F-Response, All Rights Reserved

Original file name:
f-response-unow-worker.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\f-response now\f-response-unow-worker.exe

Digital Signature
Signed by:
Agile Risk Management LLC

Authority:
GlobalSign nv-sa

Valid from:
4/11/2016 8:42:23 AM

Valid to:
5/31/2018 11:21:34 AM

Subject:
E=support@f-response.com, CN=Agile Risk Management LLC, O=Agile Risk Management LLC, L=Tampa, S=FL, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G3, O=GlobalSign nv-sa, C=BE

Serial number:
35092BAF9A055BAE669F69FC

File PE Metadata
Compilation timestamp:
5/27/2016 12:57:47 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
12288:pvW+/jWwunclPgE9n0wNZbJMvspuPoM55nlkntx4i:R3jnuchV0wnNhuwS1Gtx4i

Entry address:
0x1000

Entry point:
B8, F8, 44, 57, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 16, 18, 12, DB, 9B, 88, 2E, CD, EC, D6, D3, E9, 27, 85, 34, 6E, 50, E0, 50, 6B, 8E, C5, C8, A8, C4, 0D, E1, C3, 4C, C8, 5F, 74, D1, 28, C2, D5, 70, 55, 59, 9B, 15, C8, 8C, 87, 07, FD, 91, E2, DC, 10, 18, E2, 04, 72, B6, 91, 6B, 0D, 83, A2, 82, 66, 64, B8, 00, D9, 4C, E0, 96, F2, DF, 94, D4, 38, 59, 90, C6, 43, 88, 76, 6E, EA, 54, 65, 01, F1, E5, EF, E2, FD, A3, C4, 39...
 
[+]

Entropy:
7.6375

Packer / compiler:
PECompact v2

Code size:
778.5 KB (797,184 bytes)

Scan f-response-unow-worker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.