home

wrcsetup.exe

Tensons Corporation

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Download Accelerator Manager. The file has been seen being downloaded from download.tensons.com and multiple other hosts.
Publisher:
Tensons Corporation  (signed and verified)

MD5:
7cdd5648ecf2ab11e1f369997daac41e

SHA-1:
441c76e91b7bb09a4bec54edb27c96780eadc33f

SHA-256:
3ea91c7034b02bfcd1d86dcb15f95adb4fd294e6dad71b75e3f5fdf8b0408641

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/15/2024 5:14:37 AM UTC  (today)

File size:
1.3 MB (1,336,976 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\tensons\download accelerator manager\wrcsetup.exe

Digital Signature
Signed by:
Tensons Corporation

Authority:
COMODO CA Limited

Valid from:
9/22/2014 5:30:00 AM

Valid to:
9/22/2017 5:29:59 AM

Subject:
CN=Tensons Corporation, O=Tensons Corporation, STREET=PO Box 230092, L=Brooklyn, S=NY, PostalCode=11223, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B911CC7038EA832D7CFB12525AFCC7A4

File PE Metadata
Compilation timestamp:
6/7/2009 3:11:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:GiriPbgXSwcUORaRTs1t61nAld00+9RF6PUIH73eGKyv:jabgXSwcHRaRIkap+9X6lDej0

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9886

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file wrcsetup.exe has been discovered within the following program.

Download Accelerator Manager  by Tensons Corporation
Publisher's description - “Download Accelerator Manager (DAM) empowers you to download Internet files and save Web videos, music from sites easily with the fastest speed.”
www.tensons.com
57% remove it
 
Powered by Should I Remove It?

The file wrcsetup.exe has been seen being distributed by the following 2 URLs.

http://download.tensons.com/.../WRCsetup.exe

http://website-ripper-copier.software.informer.com/.../

Scan wrcsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.