home

Werks.exe

Command Center

WiLife, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WiLife Command Center’.
Publisher:
WiLife  (signed by WiLife, Inc.)

Product:
Command Center

Description:
Werks

Version:
2.5.968.0

MD5:
65568a13b63eda946abf3f6159968313

SHA-1:
8b2098c0fc3a9f9f519fd2849ed243734eaa886c

SHA-256:
e2a0905644bf40fccf5a8c9d104e08d8b8570d98d0fd9c2ed8b025f1f1714aad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:07:44 AM UTC  (today)

File size:
9.9 MB (10,429,160 bytes)

Product version:
2.5.968.0

Copyright:
Copyright (c) 2005-2009, Logitech, Inc.

Trademarks:
WiLife Command Center is a legal trademark of Logitech, Inc.

Original file name:
Werks.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wilife command center\werks.exe

Digital Signature
Signed by:
WiLife, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/12/2008 3:43:33 PM

Valid to:
1/28/2010 1:50:49 PM

Subject:
CN="WiLife, Inc.", OU=Secure Application Development, O="WiLife, Inc.", L=Draper, S=Utah, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
7926DD5C39085D2D2F5099B6F549AB34

File PE Metadata
Compilation timestamp:
7/9/2009 4:37:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x9E9A2E

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.0531

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
9.9 MB (10,387,456 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WiLife Command Center

Command:
"C:\Program Files\wilife command center\werks.exe" \logon


Scan Werks.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.