home

wdservicestarter_64.exe

WatchDox Windows Plug-in

WatchDox Inc.

Publisher:
WatchDox Inc.  (signed and verified)

Product:
WatchDox Windows Plug-in

Description:
WatchDox Service Starter Process

Version:
3,8,2,39626

MD5:
7b2515b3c20c62fd727c42be3f37b315

SHA-1:
39dd6efece4f1c5852e3f4ca7fb2e10786d2fddd

SHA-256:
e48263c6ed58e12b196ae1ba7f9678f97f4c131018de493d8234d1a858ee8173

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:23:49 PM UTC  (today)

File size:
179.7 KB (184,032 bytes)

Product version:
3,8,2,39626

Copyright:
(c) WatchDox. All rights reserved.

Original file name:
WDServiceStarter_XX.exe

File type:
Executable application (Win64 EXE)

Language:
Hebrew (Israel)

Common path:
C:\users\{user}\appdata\roaming\watchdox\windows plugin\wdservicestarter_64.exe

Digital Signature
Signed by:
WatchDox Inc.

Authority:
DigiCert Inc

Valid from:
10/20/2012 8:00:00 PM

Valid to:
10/24/2014 8:00:00 AM

Subject:
CN=WatchDox Inc., O=WatchDox Inc., L=Palo Alto, S=California, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
064C5D6BD32828F2E8BC7643B89D5AC1

File PE Metadata
Compilation timestamp:
7/7/2013 9:20:34 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
3072:JIXMDhMXTH4yk1+ka3NKSzCmqtYbo0d5zMOs1bcRZEY8asdNyKNI:JI8DETYJm3NemGYboYoDkD

Entry address:
0x3E04

Entry point:
48, 83, EC, 28, E8, B3, 27, 00, 00, 48, 83, C4, 28, E9, 76, FE, FF, FF, CC, CC, 40, 53, 48, 83, EC, 20, 48, 8D, 05, 5B, D6, 01, 00, 48, 8D, 54, 24, 30, 41, B8, 01, 00, 00, 00, 48, 89, 44, 24, 30, 48, 8B, D9, E8, 4F, 28, 00, 00, 4C, 8D, 1D, 2C, D6, 01, 00, 48, 8B, C3, 4C, 89, 1B, 48, 83, C4, 20, 5B, C3, 48, 8D, 05, 19, D6, 01, 00, 48, 89, 01, E9, 55, 29, 00, 00, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8D, 05, FF, D5, 01, 00, 8B, DA, 48, 8B, F9, 48, 89, 01, E8, 36, 29, 00, 00, F6, C3, 01, 74, 08, 48...
 
[+]

Entropy:
6.3457

Code size:
125 KB (128,000 bytes)

Scan wdservicestarter_64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.