home

wgengine.exe

WinGuard Pro 2016

Christopher Homer

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WGP’.
Publisher:
WinGuard Pro Ltd  (signed by Christopher Homer)

Product:
WinGuard Pro 2016

Version:
10.0.0.0

MD5:
8c1ec61a3dbd65c5b87021fb2f5057db

SHA-1:
753aa2aaeba7075d9eb1440677f919ce9912d221

SHA-256:
fd3df31d52f952a7b5bfbb0b3b27aa4076f7958ce8b0e5c6aab595d8a8e915e5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 10:52:41 AM UTC  (today)

File size:
45.5 KB (46,600 bytes)

Product version:
10.0.0.0

Copyright:
Copyright © 2015

Trademarks:
Copyright © 2015

Original file name:
wgengine.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wgpro\wgengine.exe

Digital Signature
Signed by:
Christopher Homer

Authority:
Unizeto Technologies S.A.

Valid from:
8/26/2015 4:15:28 AM

Valid to:
8/25/2016 4:15:28 AM

Subject:
E=tech@winguardpro.com, CN=Christopher Homer, O=Christopher Homer, C=GB

Issuer:
CN=Certum Code Signing CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
548368225951C31B83C0D0360D05DA7A

File PE Metadata
Compilation timestamp:
8/26/2015 7:48:28 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
80.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:xvY+R0Oiv8Zi7OTdipPwrOhvyUL287+c5tu1RxYhYWKT2E:xvYvv8qOTEpP9VLVw1RxmYD

Entry address:
0x8CDA

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9999

Code size:
27.5 KB (28,160 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WGP

Command:
C:\Program Files\wgpro\wgengine.exe


Scan wgengine.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.