» worktimeadministrator.exe
Overview
Analysis
File Details
Behaviors (1)

worktimeadministrator.exe

WorkTime

NesterSoft Inc.

File name:

Publisher:

NesterSoft Inc. (signed and verified)

Product:

WorkTime

Description:

WorkTime Administrator

Version:

5.16.0.137

MD5:

ae34ad03708af2b85880da077a408e3e

SHA-1:

0fcc8c338e125d1eafcb2d2661ffdfbf86715d42

SHA-256:

9636910bbcd8c8e435d974abc5101b237faced975caa2218a3a3eabccde40cc7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 9:47:33 PM UTC (today)

File size:

1.6 MB (1,724,232 bytes)

Product version:

1999-2009 NesterSoft Inc.

Trademarks:

WorkTime® NesterSoft Inc.

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\worktimeadministrator\worktimeadministrator.exe

Digital Signature

Signed by:

NesterSoft Inc.

Authority:

The USERTRUST Network

Valid from:

11/20/2009 3:00:00 AM

Valid to:

11/20/2012 2:59:59 AM

Subject:

CN=NesterSoft Inc., O=NesterSoft Inc., STREET=56 Noble Prince Pl, L=Woodbridge, S=ON, PostalCode=L4H1S5, C=CA

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

550CFF8D8820F2EBD59B3B511E78B8DB

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:WMcnC7Owokzp9S9IYE156BUMthTbGRKEiURD:cC7Jzp9S8aPPGsURD

Entry address:

0x1000

Entry point:

68, 01, D0, 8E, 00, E8, 01, 00, 00, 00, C3, C3, 0D, 96, 4A, 0A, 3F, B0, 2B, 74, BC, D6, B0, 49, B8, 30, E1, 1A, 5C, 7F, A2, 8B, 73, 25, 3A, 58, 2B, AE, 72, 8F, EB, 0C, A2, 26, DD, 79, 0C, A8, 7F, 6F, A8, 8B, 17, 88, C0, A1, 5D, 92, AD, B5, 54, 57, F7, 0E, AF, C4, 7B, 32, 9A, 06, A7, A0, 49, E1, 1A, 3E, 5C, 33, C1, E6, 0A, 30, 8E, A6, BB, F9, 85, B7, BD, AB, ED, B4, 1F, CF, 91, 5E, 85, 70, 61, E9, 1B, 80, 25, CE, A0, ED, C5, 21, 67, AE, 01, 59, 1B, 8B, E9, EF, 05, 1E, 73, 4E, 13, EE, 44, CA, 35, 96, A2, 9D... 
[+]

Entropy:

7.9832

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

3.9 MB (4,132,864 bytes)

Windows Firewall Allowed Program

Name:

C:\Program Files\WorkTimeAdministrator\WorkTimeAdministrator.exe

Scan worktimeadministrator.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.