home

wupdaterpc.exe

Rasther PC

Tecnomotor Eletrônica do Brasil S/A

This is a setup program which is used to install the application. The file has been seen being downloaded from download.tecnomotor.com.br.
Publisher:
Tecnomotor Eletrônica do Brasil S/A  (signed and verified)

Product:
Rasther PC

Description:
Atualização Rasther PC

Version:
1.2.4.6

MD5:
9ed56476bc6bec041a028e9a70b0aa8c

SHA-1:
79e83421258b4993f00a99539725367fc9794a26

SHA-256:
f2485ee7df89a95f9b8448279c78c42060e1cf10fed52c1ba5f9d453793cd3a7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/6/2025 6:38:52 AM UTC  (today)

File size:
3.5 MB (3,705,120 bytes)

Product version:
1.0

Copyright:
Tecnomotor Eletrônica do Brasil S/A

Original file name:
wUpdateRpc

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\wupdaterpc.exe

Digital Signature
Signed by:
Tecnomotor Eletrônica do Brasil S/A

Authority:
The USERTRUST Network

Valid from:
8/30/2015 9:00:00 PM

Valid to:
8/30/2018 8:59:59 PM

Subject:
CN=Tecnomotor Eletrônica do Brasil S/A, O=Tecnomotor Eletrônica do Brasil S/A, STREET="Rua Albino Triques, 2040, Santa Felícia", L=São Carlos, S=São Paulo, PostalCode=13563-340, C=BR

Issuer:
CN=USERTrust RSA Code Signing CA, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

Serial number:
4AE1196EAC9884C3C514A09680A72785

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ZI4+R3JRZEQxWyqMI6h+6OPvFY/nRBhxBpJRhiZ32m7mvbJPreBszaqgo2sJ/yTx:ZI4abE5nuRBhF6sPre6eT4OpDKriQJmz

Entry address:
0x209180

Entry point:
55, 8B, EC, 83, C4, E8, 53, 33, C0, 89, 45, E8, 89, 45, EC, B8, C8, 87, 60, 00, E8, 97, E7, DF, FF, 8B, 1D, C8, 42, 61, 00, 33, C0, 55, 68, AB, 92, 60, 00, 64, FF, 30, 64, 89, 20, 8B, 03, E8, 38, E3, E6, FF, B2, 01, A1, A0, 2C, 4E, 00, E8, 08, 98, ED, FF, 8B, 15, E8, 40, 61, 00, 89, 02, A1, DC, 43, 61, 00, 8B, 00, C6, 40, 30, 00, A1, DC, 43, 61, 00, 8B, 00, B2, 01, E8, 4B, 1F, E7, FF, 8D, 55, EC, A1, E8, 40, 61, 00, 8B, 00, E8, 0C, 9B, ED, FF, 8B, 55, EC, A1, DC, 43, 61, 00, 8B, 00, 83, C0, 2C, E8, AE, BE...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2 MB (2,130,944 bytes)

The file wupdaterpc.exe has been seen being distributed by the following URL.

http://download.tecnomotor.com.br/.../wUpdateRpc.exe

Scan wupdaterpc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.