home

workpace.exe

Wellnomics WorkPace

Wellnomics Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Wellnomics WorkPace 3.9.0’.
Publisher:
Wellnomics Ltd  (signed by Wellnomics Limited)

Product:
Wellnomics WorkPace

Version:
3.7.0.4

MD5:
6882c0f796dc60d96dc3f54a575dcdbb

SHA-1:
ce8ef61a9141614709b656e6c54c6d2d1c33f58d

SHA-256:
f41baa1e0569955c3cc5af8675eadd4a391002dee0df0bc5206f4ad4b79bf6c0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 12:30:09 PM UTC  (today)

File size:
1.2 MB (1,295,000 bytes)

Product version:
3.7.0

Copyright:
(c) 2008 Wellnomics Ltd

Trademarks:
Wellnomics is a registered trademark of Wellnomics Ltd

File type:
Executable application (Win32 EXE)

Language:
English (New Zealand)

Common path:
C:\Program Files\wellnomics workpace\workpace.exe

Digital Signature
Signed by:
Wellnomics Limited

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/23/2009 5:30:00 AM

Valid to:
3/3/2010 5:29:59 AM

Subject:
CN=Wellnomics Limited, OU=SECURE APPLICATION DEVELOPMENT, O=Wellnomics Limited, L=Christchurch, S=Canterbury, C=NZ

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
5223CAF42273BF8BCA6EE34ADBE43062

File PE Metadata
Compilation timestamp:
10/22/2009 9:08:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:Cd24XZUFUoX3qgDdmEHj/z++NJRlV8ouhbzd78O+Xgcl4I:R4XdoX3qMmQb+KJ7V8pbzd78O+XZf

Entry address:
0x11C8

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 98, 20, 4E, 00, A1, 8B, 20, 4E, 00, C1, E0, 02, A3, 8F, 20, 4E, 00, 52, 6A, 00, E8, 1D, 04, 0E, 00, 8B, D0, E8, A6, 31, 0C, 00, 5A, E8, A8, 24, 0C, 00, E8, 9F, 31, 0C, 00, 6A, 00, E8, 94, 41, 0D, 00, 59, 68, 34, 20, 4E, 00, 6A, 00, E8, F7, 03, 0E, 00, A3, 93, 20, 4E, 00, 6A, 00, E9, 3F, DA, 0D, 00, E9, C2, 41, 0D, 00, 33, C0, A0, 7D, 20, 4E, 00, C3, A1, 93, 20, 4E, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, AC, 00, 00, 00, 0B, C9...
 
[+]

Entropy:
6.2413

Code size:
900 KB (921,600 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Wellnomics WorkPace 3.9.0

Command:
"C:\Program Files\wellnomics workpace\workpace.exe"


Scan workpace.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.