home

wupdaterpcstart.exe

Update Rasther

Tecnomotor Eletrônica do Brasil S/A

This is a setup program which is used to install the application. The file has been seen being downloaded from download.tecnomotor.com.br and multiple other hosts.
Publisher:
Tecnomotor Eletrônica do Brasil S/A  (signed and verified)

Product:
Update Rasther

Description:
Assistente de atualização

Version:
1.2.1.0

MD5:
ff624a63694cc1454be7952bbd73c362

SHA-1:
f9f3325f9bf1fd02bd7ef96b844e162b471db95e

SHA-256:
977022702165018d5b696efb6afb044011bbe6d6c9810203f4e1a5c8c64bc301

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/1/2025 9:27:16 AM UTC  (today)

File size:
2.9 MB (3,055,264 bytes)

Product version:
1.0.0.0

Copyright:
Tecnomotor Eletrônica do Brasil S/A

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\Program Files\tecnomotor\rastherpc\wupdaterpcstart.exe

Digital Signature
Signed by:
Tecnomotor Eletrônica do Brasil S/A

Authority:
The USERTRUST Network

Valid from:
8/30/2015 9:00:00 PM

Valid to:
8/30/2018 8:59:59 PM

Subject:
CN=Tecnomotor Eletrônica do Brasil S/A, O=Tecnomotor Eletrônica do Brasil S/A, STREET="Rua Albino Triques, 2040, Santa Felícia", L=São Carlos, S=São Paulo, PostalCode=13563-340, C=BR

Issuer:
CN=USERTrust RSA Code Signing CA, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

Serial number:
4AE1196EAC9884C3C514A09680A72785

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:NA7XJvE1AovZDuTfzAmV5+TdraCQhDKriQwP:NwXFE1XsAmVJCgDKG/

Entry address:
0x1978F0

Entry point:
55, 8B, EC, 83, C4, F0, B8, C0, 71, 59, 00, E8, 24, F9, E6, FF, A1, 7C, FC, 59, 00, 8B, 00, E8, B8, BC, EC, FF, A1, 7C, FC, 59, 00, 8B, 00, BA, 50, 79, 59, 00, E8, 9F, B8, EC, FF, 8B, 0D, C0, FA, 59, 00, A1, 7C, FC, 59, 00, 8B, 00, 8B, 15, 20, 68, 59, 00, E8, A7, BC, EC, FF, A1, 7C, FC, 59, 00, 8B, 00, E8, 1B, BD, EC, FF, E8, 76, CE, E6, FF, 00, 00, FF, FF, FF, FF, 14, 00, 00, 00, 52, 61, 73, 74, 68, 65, 72, 50, 63, 55, 70, 64, 61, 74, 65, 53, 74, 61, 72, 74, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.6 MB (1,665,536 bytes)

The file wupdaterpcstart.exe has been seen being distributed by the following 4 URLs.

http://download.tecnomotor.com.br/?RastherPc/.../wUpdateRpcStart.exe

http://download.tecnomotor.com.br/?RastherPc/1//wUpdateRpcStart.exe

http://download.tecnomotor.com.br/?RastherPc/.../wUpdateRpcStart.exe

http://download.tecnomotor.com.br/?RastherPcBeta/.../wUpdateRpcStart.exe

Scan wupdaterpcstart.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.