home

Werks.exe

Command Center

WiLife, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WiLife Command Center’.
Publisher:
WiLife  (signed by WiLife, Inc.)

Product:
Command Center

Description:
Werks

Version:
2.5.968.0

MD5:
d155cddf995304585b96c8fb52f1c2aa

SHA-1:
131311780b27c27496eeca7a9f431c157cd534c3

SHA-256:
50b390a6b8e2bd92e1044edb73c9f4323ca1eeabfedaa10d325e045222a67c49

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:11:38 PM UTC  (today)

File size:
9.9 MB (10,429,160 bytes)

Product version:
2.5.968.0

Copyright:
Copyright (c) 2005-2009, Logitech, Inc.

Trademarks:
WiLife Command Center is a legal trademark of Logitech, Inc.

Original file name:
Werks.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wilife command center\werks.exe

Digital Signature
Signed by:
WiLife, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/12/2008 3:43:33 PM

Valid to:
1/28/2010 1:50:49 PM

Subject:
CN="WiLife, Inc.", OU=Secure Application Development, O="WiLife, Inc.", L=Draper, S=Utah, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7926DD5C39085D2D2F5099B6F549AB34

File PE Metadata
Compilation timestamp:
7/9/2009 4:37:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x9E9A2E

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.0531

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
9.9 MB (10,387,456 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WiLife Command Center

Command:
"C:\Program Files\wilife command center\werks.exe" \logon


Scan Werks.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.