home

wcagent.exe

WCAgent 응용 프로그램

Netpia.com Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘webclean’.
Publisher:
Netpia.com  (signed by Netpia.com Inc.)

Product:
WCAgent 응용 프로그램

Description:
wcagent.exe

Version:
2.6.20080814

MD5:
bc2b24f5fb9a06949625244582f82a32

SHA-1:
de038f2a241fc4d4a5d71a6bca55244459de6723

SHA-256:
5401e40762531ea2912443c5d8671d1320df84e9a5753b973b7898b3264b4f02

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:34:10 AM UTC  (today)

File size:
326.9 KB (334,704 bytes)

Product version:
2.6.20080814

Copyright:
Copyright (C) 1998 - 2006 Netpia.com Inc.

Trademarks:
WebClean

Original file name:
wcagent.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\webclean\wcagent.exe

Digital Signature
Signed by:
Netpia.com Inc.

Authority:
GlobalSign nv-sa

Valid from:
8/27/2009 5:06:41 PM

Valid to:
8/27/2010 5:06:41 PM

Subject:
E=help@netpiacorp.com, CN=Netpia.com Inc., O=Netpia.com Inc., C=KR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001235B146CC4

File PE Metadata
Compilation timestamp:
8/20/2008 2:32:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:PNpEp0p+ng3pmtXH/CTqGYWkXzmUMCaxkJzJxirxsL5ky7TilxJlP9M47m0bQGaI:PwpXHtXfAkiW4y1kcsM2LbiJCR

Entry address:
0x1191F

Entry point:
55, 8B, EC, 6A, FF, 68, 68, F7, 42, 00, 68, D0, 5B, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 94, C2, 42, 00, 33, D2, 8A, D4, 89, 15, 04, F6, 43, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 00, F6, 43, 00, C1, E1, 08, 03, CA, 89, 0D, FC, F5, 43, 00, C1, E8, 10, A3, F8, F5, 43, 00, 6A, 01, E8, 5A, 49, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 3D, 36, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.3789

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
172 KB (176,128 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
webclean

Command:
C:\Program Files\webclean\wcagent.exe


Scan wcagent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.