home

Werks.exe

Command Center

WiLife, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WiLife Command Center’.
Publisher:
WiLife  (signed by WiLife, Inc.)

Product:
Command Center

Description:
Werks

Version:
2.5.957.0

MD5:
677660da3c4a2b99a24932f08e02c046

SHA-1:
f3048d1251cef5b9d90822ae30bf8d8d0846a119

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/4/2025 4:44:39 PM UTC  (today)

File size:
9.9 MB (10,429,160 bytes)

Product version:
2.5.957.0

Copyright:
Copyright (c) 2005-2008, Logitech, Inc.

Trademarks:
WiLife Command Center is a legal trademark of Logitech, Inc.

Original file name:
Werks.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wilife command center\werks.exe

Digital Signature
Signed by:
WiLife, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/24/2008 3:16:44 PM

Valid to:
1/28/2009 3:50:49 PM

Subject:
CN="WiLife, Inc.", OU=Secure Application Development, O="WiLife, Inc.", L=Draper, S=Utah, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
1F604145E0A1E71E95D31494837AA0D0

File PE Metadata
Compilation timestamp:
12/3/2008 2:14:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:aRF24V1MqxLKGTozsi0K1KVTPRiavxdrADOOJBy4mjMl5rvAFI97aMDdRCOPN3b:aTrLKD0cYgavgOMgqW2acdRnPx

Entry address:
0x9E973E

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.0530

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
9.9 MB (10,387,456 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WiLife Command Center

Command:
"C:\Program Files\wilife command center\werks.exe" \logon


Scan Werks.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.