home

wrcsetup.exe

Tensons Corporation

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Download Accelerator Manager. The file has been seen being downloaded from www.tensons.com and multiple other hosts.
Publisher:
Tensons Corporation  (signed and verified)

MD5:
0962448750028ed71f7fbffbed1be990

SHA-1:
d433019f8ed286fb48c8050c90383f6f1f31b6f2

SHA-256:
af8e2a3302ef9ca340284f0b382951094ca774fa8cf3ce57939220f2503d167e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 4:39:59 AM UTC  (today)

File size:
1.3 MB (1,326,800 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\wrcsetup.exe

Digital Signature
Signed by:
Tensons Corporation

Authority:
COMODO CA Limited

Valid from:
9/22/2014 5:30:00 AM

Valid to:
9/22/2017 5:29:59 AM

Subject:
CN=Tensons Corporation, O=Tensons Corporation, STREET=PO Box 230092, L=Brooklyn, S=NY, PostalCode=11223, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B911CC7038EA832D7CFB12525AFCC7A4

File PE Metadata
Compilation timestamp:
6/7/2009 3:11:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:djn3gUuTf4t8OUkO/jLL+2H5AMnjSGqShvEQYdyvSc5sf/q/YB:ln3gPYCjPHH5AojSGqShhYa7Wa/YB

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9886

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file wrcsetup.exe has been discovered within the following programs.

Download Accelerator Manager  by Tensons Corporation
Publisher's description - “Download Accelerator Manager (DAM) empowers you to download Internet files and save Web videos, music from sites easily with the fastest speed.”
www.tensons.com
57% remove it
 
Powered by Should I Remove It?

The file wrcsetup.exe has been seen being distributed by the following 2 URLs.

http://www.tensons.com/products/.../WRCsetup.exe

http://download.tensons.com/.../WRCsetup.exe

Scan wrcsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.