home

postupdate.exe

wescan inc.

Publisher:
wescan inc.  (signed and verified)

MD5:
252b1643a14f40b6d1e97b5bed524132

SHA-1:
1b658e7f93620483c96122ebc6e3a7965b97b907

SHA-256:
d34dbf34f32db3dacbe950ab3948394a899771ebf6a84cb02bdfd0e4d29ac6d9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/4/2025 4:42:39 PM UTC  (today)

File size:
75.3 KB (77,056 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\wescan\wenotedesktop\bin\postupdate.exe

Digital Signature
Signed by:
wescan inc.

Authority:
Thawte, Inc.

Valid from:
7/1/2014 8:00:00 AM

Valid to:
8/1/2015 7:59:59 AM

Subject:
CN=wescan inc., O=wescan inc., L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
41CF50EC69D6A4DC07C857ADA3B8491F

File PE Metadata
Compilation timestamp:
8/27/2014 10:18:25 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
768:Sh6bDu2UovehXgbenLjfSSXqpwsePyvXwKVe4np7Ej28dsIouvVVXaQnlg5r:SZo0L73apePOX/V8jSQW9

Entry address:
0x9A36

Entry point:
E8, 96, 05, 00, 00, E9, 4C, FE, FF, FF, FF, 25, D0, C1, 40, 00, FF, 25, CC, C1, 40, 00, FF, 25, C0, C1, 40, 00, FF, 25, BC, C1, 40, 00, FF, 25, B8, C1, 40, 00, FF, 25, 2C, C2, 40, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47, 8B, 54, 24, 10, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 14, 89, 54, 24, 10, 8B, 44, 24, 1C, 0B, C0, 7D, 14, 47, 8B, 54, 24, 18, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 1C, 89, 54, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 18, 8B...
 
[+]

Entropy:
5.9551

Code size:
41 KB (41,984 bytes)

Scan postupdate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.