home

tcw.exe

TimeClockWindow

ZPAY Payroll Systems, Inc.

Publisher:
ZPAY Payroll Systems  (signed by ZPAY Payroll Systems, Inc.)

Product:
TimeClockWindow

Version:
2.0.41.0

MD5:
7ce1d01882feafd0a1c6b132063add36

SHA-1:
35ee2a06d1d2b2caf8aaca1cfef6bc373b231ec3

SHA-256:
37f2a268062c2fec832ca2a41ff6157f2ee2b685a263986c0c7c8a7a64fba636

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:00:35 AM UTC  (today)

File size:
11.3 MB (11,809,504 bytes)

Product version:
2.0.0.0

Copyright:
Copyright © 2008-2013 by ZPAY Payroll Systems

Original file name:
tcw.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\timeclockwindow\tcw.exe

Digital Signature
Signed by:
ZPAY Payroll Systems, Inc.

Authority:
COMODO CA Limited

Valid from:
11/15/2012 3:30:00 AM

Valid to:
11/16/2015 3:29:59 AM

Subject:
CN="ZPAY Payroll Systems, Inc.", O="ZPAY Payroll Systems, Inc.", STREET=10745 Serenity Ln, L=Savanna, S=IL, PostalCode=61074, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
35643525EAA4C5016E68EAB95A621EC8

File PE Metadata
Compilation timestamp:
8/20/2015 1:56:16 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:EOmvoqpTkO7SFRW2sokS9DzXoBN3eSyuBnro4rkCZMInC6cA:E5voqW5FHplXoBN3xybDqMInC6p

Entry address:
0xACF234

Entry point:
B8, 4C, 43, 2E, 02, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, CF, 6E, 32, 30, BF, 86, 82, C2, 27, 1C, E6, 07, 28, 5F, 0A, 1A, AA, BE, 35, 17, 18, D9, 00, E5, 96, 93, 19, 2E, 2D, 67, 0F, 64, D4, A1, 72, B3, AD, 69, 59, E9, D7, BC, A5, 86, C1, 76, F9, B2, AE, 54, 04, A6, E2, 3E, F8, 60, 3C, D9, F0, E2, B4, 38, 6D, FD, 77, 2D, F0, D0, 96, 28, CB, 86, 28, 82, 8A, BC, 65, 52, E8, EC, 6F, 86, BB, 91, D5, 95, 2D, E3, D9, 8E, 88, 46, C4...
 
[+]

Entropy:
7.9885

Packer / compiler:
PECompact v2

Code size:
10.8 MB (11,330,560 bytes)

Scan tcw.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.