home

Werks.exe

Command Center

WiLife, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WiLife Command Center’.
Publisher:
WiLife  (signed by WiLife, Inc.)

Product:
Command Center

Description:
Werks

Version:
2.5.968.0

MD5:
ab69be1e765922a843271c8b757f47aa

SHA-1:
88d4b1c6e7081de27ab5ce8d27ce17727f30dea9

SHA-256:
7c6c27aba21f9ded3b8d5ac249e1a69becbacf92dc503d0c05e1769ff67d5fe0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/4/2025 1:22:16 PM UTC  (today)

File size:
9.9 MB (10,429,160 bytes)

Product version:
2.5.968.0

Copyright:
Copyright (c) 2005-2009, Logitech, Inc.

Trademarks:
WiLife Command Center is a legal trademark of Logitech, Inc.

Original file name:
Werks.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wilife command center\werks.exe

Digital Signature
Signed by:
WiLife, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/12/2008 3:43:33 PM

Valid to:
1/28/2010 1:50:49 PM

Subject:
CN="WiLife, Inc.", OU=Secure Application Development, O="WiLife, Inc.", L=Draper, S=Utah, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7926DD5C39085D2D2F5099B6F549AB34

File PE Metadata
Compilation timestamp:
7/9/2009 4:37:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:3RF2YV1MqxLKGTozsi0K1KVTPRiavxdrADOOJBy4mjMl5rvAFI97aMDdRCOPNEg:3HrLKD0cYgavgOMgqW2acdRnPGg

Entry address:
0x9E9A2E

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.0531

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
9.9 MB (10,387,456 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WiLife Command Center

Command:
"C:\Program Files\wilife command center\werks.exe" \logon


Scan Werks.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.