» z-wecker.exe
Overview
Analysis
File Details
Programs (1)

z-wecker.exe

Z-Wecker

Andreas Baumann

File name:

z-wecker.exe

Publisher:

IMU - Andreas Baumann (signed by Andreas Baumann)

Product:

Z-Wecker

Description:

Tool für Z-Cron

Version:

2.09.0004

MD5:

ff0ae45d39179a8b65adde7905aea926

SHA-1:

281369f7617d8ed2745f3e2b36c73f2612709110

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 11:51:35 AM UTC (today)

File size:

127 KB (130,032 bytes)

Product version:

2.09.0004

Original file name:

z-wecker.exe

File type:

Executable application (Win32 EXE)

Language:

German (Germany)

Common path:

C:\Program Files\z-cron\z-wecker.exe

Digital Signature

Signed by:

Andreas Baumann

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

12/20/2007 7:00:00 PM

Valid to:

2/19/2010 6:59:59 PM

Subject:

CN=Andreas Baumann, OU=SECURE APPLICATION DEVELOPMENT, O=Andreas Baumann, L=Berlin, S=Berlin, C=DE

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

6271D7C1518C0526824612C3CC9A1041

File PE Metadata

Compilation timestamp:

9/27/2008 3:40:05 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:eWvaBB6+rN9ZjfyltrbZtckOwujMs+c8ms+c81yZxzIn3:eWvi9xfylhZ+Vwa1MrMUy

Entry address:

0x390C

Entry point:

B8, B8, 18, 46, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 4C, A8, 22, E1, 12, 35, C0, 34, 7B, 38, A7, 2E, C2, 1D, 16, BB, DA, 18, 1F, 20, 6A, B1, 2E, A4, F3, CD, C7, 7A, 57, F1, 61, B1, BE, 97, 14, 24, E9, 51, CB, 79, 41, F4, 75, 75, A6, 8D, FC, 8B, B1, 5C, D9, BB, 03, 5F, 19, 86, 34, 43, ED, 0E, AA, DF, 54, 7E, E0, 27, 15, A3, C0, 76, E4, 1B, 77, D0, A3, 59, DD, 6E, 5A, B2, BC, FC, 99, 95, CA, E9, 37, 1F, E5, 62, FA, 0F, 53... 
[+]

Entropy:

7.3505

Packer / compiler:

PECompact v2

Code size:

268 KB (274,432 bytes)

The file z-wecker.exe has been discovered within the following programs.

Z-Cron by IMU Andreas Baumann

www.z-cron.de

About 1% of users remove it

Scan z-wecker.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.