» worktime.exe
Overview
Analysis
File Details

worktime.exe

WorkTime

NesterSoft Inc.

File name:

worktime.exe

Publisher:

NesterSoft Inc. (signed and verified)

Product:

WorkTime

Version:

5.16.1.1026

MD5:

9f0e7418cd462aa055b08b2258d1b8fa

SHA-1:

2922924c3f25b74691763ba3af89832add735d4a

SHA-256:

bab5f951faa20893822655fd623e2aa3b9fe6d2459f10331fb21f58d59910713

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 2:43:38 AM UTC (today)

File size:

2.3 MB (2,427,176 bytes)

Product version:

5.xx

1999-2010 NesterSoft Inc.

Trademarks:

WorkTime(r) NesterSoft Inc.

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\worktime\worktime.exe

Digital Signature

Signed by:

NesterSoft Inc.

Authority:

The USERTRUST Network

Valid from:

11/20/2009 1:00:00 AM

Valid to:

11/20/2012 12:59:59 AM

Subject:

CN=NesterSoft Inc., O=NesterSoft Inc., STREET=56 Noble Prince Pl, L=Woodbridge, S=ON, PostalCode=L4H1S5, C=CA

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

550CFF8D8820F2EBD59B3B511E78B8DB

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:d+JSoDic7zovSIvs2ibrP+gNAE6oqX6I4jZtwiuF:M99Xovfvs2GL+gNAE67q1g

Entry address:

0x1000

Entry point:

68, 01, 60, 90, 00, E8, 01, 00, 00, 00, C3, C3, 2E, 21, 47, 51, E8, 4C, 88, B7, E2, 2F, 56, E2, 78, 15, F2, 5B, F6, E1, 90, 42, BF, 72, 97, FD, BC, 00, 0E, 0A, 8A, 82, 9E, 9F, 15, 3C, 7B, E1, 41, 3B, 27, D3, 6C, E6, 20, DC, FA, 9A, 0A, 56, E2, F3, DA, C0, 95, A4, 81, 83, A6, C5, D2, 1F, 6D, 3F, 7A, C4, 19, 5C, B9, 8A, DE, 3D, FA, A0, 61, 58, AD, D7, AA, 3B, 11, C4, AC, 2B, ED, F3, C6, 7E, 72, 5D, B4, 7F, F4, E9, C1, 25, 3B, 8A, 87, C7, 66, B4, DA, A9, 67, 6F, 64, CD, 0B, 7C, 5F, 5F, BF, C0, 9E, 79, 3D, AE... 
[+]

Entropy:

7.5546

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

3.9 MB (4,068,864 bytes)

Scan worktime.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.