home

forcein.exe

Performance Now

Administaff Business Services, L.P.

Publisher:
Administaff Business Services, L.P.  (signed and verified)

Product:
Performance Now

Description:
Force Employee Check In

Version:
4.01.0012

MD5:
8939536f38035c42082f1a70e5f35209

SHA-1:
4991493b439bc1796e8342a163da08ba2042422a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 5:38:23 AM UTC  (today)

Scan engine
Detection
Engine version

SUPERAntiSpyware
Trojan.Agent/Gen-Koobface[Bonkers]
10269

File size:
57.4 KB (58,824 bytes)

Product version:
4.01.0012

Copyright:
Copyright© 2007 Administaff Business Services, L.P. All rights reserved.

Original file name:
forcein.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\hrtools applications\performance now 4\forcein.exe

Digital Signature
Signed by:
Administaff Business Services, L.P.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/19/2008 6:00:00 PM

Valid to:
2/19/2010 5:59:59 PM

Subject:
CN="Administaff Business Services, L.P.", OU=HRTools, O="Administaff Business Services, L.P.", L=Kingwood, S=Texas, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
39F935D984409833E7A4C516B5B6572B

File PE Metadata
Compilation timestamp:
2/28/2008 5:47:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:AuoIffpiofASWA4pbr64RMe21ZwRX/OfcBejXfqBDhiyoln4LI:AuoepiyASWBbm4Rbayiyoln48

Entry address:
0x1164

Entry point:
68, 1C, 13, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 77, 2E, B0, E4, 79, 7B, 06, 45, B9, 53, 63, 9E, 9C, BE, 98, D5, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 66, 6F, 72, 63, 65, 69, 6E, 00, 00, 00, 00, 00, 50, 00, 00, 00, 3B, 31, 47, F5, ED, 87, 10, 48, 8B, CA, 52, 75, 63, CF, A3, 43, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 03, 00, 00, 00, 00, 03, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.8034

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
44 KB (45,056 bytes)

Scan forcein.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.