» worktimeserverservice.exe
Overview
Analysis
File Details
Behaviors (1)

worktimeserverservice.exe

WorkTime

NesterSoft Inc.

File name:

Publisher:

NesterSoft Inc. (signed and verified)

Product:

WorkTime

Description:

WorkTime Server Service

Version:

7.11.0.247

MD5:

6eb45297455cdb5daf21cae9e04548a5

SHA-1:

3158eb2ca37e5b9dd1f83b6cfb6ea8863954683a

SHA-256:

cbd44c49f6c2c08d7176f0237ba0143adb7c1ec5f39d15cafd647c631660e87a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 7:58:33 PM UTC (today)

File size:

826.2 KB (846,032 bytes)

Product version:

1999-2012 NesterSoft Inc.

Trademarks:

WorkTime® NesterSoft Inc.

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\worktime\worktimeserverservice.exe

Digital Signature

Signed by:

NesterSoft Inc.

Authority:

COMODO CA Limited

Valid from:

12/9/2012 6:00:00 PM

Valid to:

12/10/2017 5:59:59 PM

Subject:

CN=NesterSoft Inc., O=NesterSoft Inc., POBox=12303, STREET=5100 Rutherford Rd, L=Woodbridge, S=ON, PostalCode=L4H 2T3, C=CA

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00A056C463A4EC17466BB9FACD80ED8606

File PE Metadata

Compilation timestamp:

6/19/1992 5:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:ajv+oCe1UjpvELMgV1ZcjiXFmV9Tw8+VNxhavEjw++uq:02oAdyV1ZcGXFmV9TF+NcvE7+uq

Entry address:

0x1000

Entry point:

68, 01, 50, 60, 00, E8, 01, 00, 00, 00, C3, C3, 52, BA, DC, 30, 88, D1, 7E, 15, 33, 12, 9B, 96, E1, AB, A9, B9, 61, 50, B4, 17, E5, 68, D2, 09, C7, D3, 57, 14, A4, E7, 79, B0, 5B, F0, 9A, 3F, 8B, CD, 35, 75, 85, 3D, 05, 90, F1, 73, AE, AA, 25, 38, 11, 89, 7B, 84, E6, C1, 48, 24, 3E, 22, 9A, C8, 68, A4, 9E, 30, E2, C7, F5, 73, 5F, 33, D9, 41, 67, AD, E9, F1, 33, 79, E9, 62, 86, 17, A5, D2, 17, EC, CE, F6, 90, 8C, 1B, 34, 5B, C8, 6F, 27, AD, 55, 08, E8, B4, D7, C1, 84, 50, 15, 5C, A1, A3, 3B, E6, 0D, 2E, 8F... 
[+]

Entropy:

7.9625

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.6 MB (1,642,496 bytes)

Windows Firewall Allowed Program

Name:

worktime server service

Scan worktimeserverservice.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.