home

wdservicestarter_32.exe

WatchDox Windows Plug-in

WatchDox Inc.

Publisher:
WatchDox Inc.  (signed and verified)

Product:
WatchDox Windows Plug-in

Description:
WatchDox Service Starter Process

Version:
3,9,5,47324

MD5:
df867dd4d4c137ccd7818ae7b8b48f8e

SHA-1:
d58739046d60fbc7e7d84dc8c9599676adf59fb4

SHA-256:
5c3da032544dc4b391a566cd19697aa985f2dee2bf6abb94579903587d8bd78d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:54:38 AM UTC  (today)

File size:
155.7 KB (159,464 bytes)

Product version:
3,9,5,47324

Copyright:
(c) WatchDox. All rights reserved.

Original file name:
WDServiceStarter_XX.exe

File type:
Executable application (Win32 EXE)

Language:
Hebraico (Israel)

Common path:
C:\users\{user}\appdata\roaming\watchdox\windows plugin\wdservicestarter_32.exe

Digital Signature
Signed by:
WatchDox Inc.

Authority:
DigiCert Inc

Valid from:
10/20/2012 9:00:00 PM

Valid to:
10/24/2014 10:00:00 AM

Subject:
CN=WatchDox Inc., O=WatchDox Inc., L=Palo Alto, S=California, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
064C5D6BD32828F2E8BC7643B89D5AC1

File PE Metadata
Compilation timestamp:
1/6/2014 9:01:01 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
3072:nRgzRFgfgXk9XV9RcC9LDMJfK8aZWpUUlYByZW7FDXaZ:R8F9XkpV4JOqUUlYByYFLaZ

Entry address:
0x3585

Entry point:
E8, D2, 21, 00, 00, E9, 95, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 56, 6A, 01, 8D, 45, FC, 50, 8B, F1, C7, 45, FC, 6C, F2, 41, 00, E8, 5E, 22, 00, 00, C7, 06, 64, F2, 41, 00, 8B, C6, 5E, C9, C3, C7, 01, 64, F2, 41, 00, E9, 2C, 23, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, 64, F2, 41, 00, E8, 19, 23, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, 01, FC, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 56, FF, 75, 08, 8B, F1, E8, A1, 23, 00, 00, C7, 06, 64, F2, 41, 00, 8B, C6, 5E, 5D, C2, 04, 00, 8B...
 
[+]

Code size:
117.5 KB (120,320 bytes)

Scan wdservicestarter_32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.