home

videoeditor.exe

Wondershare Video Editor

Wondershare Software

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-10-1k-docs.googleusercontent.com and multiple other hosts.
Publisher:
Wondershare Software

Product:
Wondershare Video Editor

Version:
5.1.1.12

MD5:
8eb106ec08dbdffe4fe5981e3b28cf84

SHA-1:
5954312cadeb919a7a74385d608b8fae3099f0d8

SHA-256:
bfb6ec95690d07cc70aea09bdc08769d3162c117141cdf5fadc402cec6d1559e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 2:50:42 AM UTC  (today)

File size:
3.6 MB (3,799,040 bytes)

Product version:
5.1.0

Copyright:
Copyright (c) 2015 Wondershare. All rights reserved.

Trademarks:
Wondershare Software

Original file name:
Wondershare Video Editor

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wondershare video editor 5.1.1.12\cracked\videoeditor.exe

File PE Metadata
Compilation timestamp:
3/2/2015 11:30:37 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:djTZKwH6vX27k07aPhdcpg0tNAsZPT0TUddxgQc9XPFo:dpT7kzZ0tO9d

Entry address:
0x29CB08

Entry point:
55, 8B, EC, B9, 06, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, 58, 95, 69, 00, E8, 73, C6, D6, FF, 33, C0, 55, 68, DD, CD, 69, 00, 64, FF, 30, 64, 89, 20, A1, 08, F6, 6A, 00, 80, 38, 00, A1, 7C, F4, 6A, 00, 0F, 95, 00, 8D, 45, EC, 50, 8D, 55, E8, B8, 01, 00, 00, 00, E8, 0C, 6A, D6, FF, 8B, 45, E8, 50, E8, A3, 69, D6, FF, 85, C0, 7E, 19, 8D, 55, E4, B8, 01, 00, 00, 00, E8, F2, 69, D6, FF, 8B, 45, E4, E8, 82, 6D, ED, FF, 84, C0, 75, 04, 33, C0, EB, 02, B0, 01, 33, C9, 5A, E8, D0, E6, D6, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2.6 MB (2,732,544 bytes)

The file videoeditor.exe has been seen being distributed by the following 20 URLs.

https://doc-10-1k-docs.googleusercontent.com/docs/securesc/is0pmum3fnjqpimfnesjeohk3g9a4r63/vme97ogcuhk8nfhaeju7slqandhq3un6/1483869600000/16936882053398032902/.../0B61HmghRVD_Ld2JLRktCV3g2TTg?e=download

https://doc-04-7s-docs.googleusercontent.com/docs/securesc/giv7ra2anth5g7rb88r795uhopeft3ge/iutotmhgvo72bnp65gv21aoblhu8hun1/1475316000000/16936882053398032902/.../0B61HmghRVD_Ld2JLRktCV3g2TTg?e=download

https://mega.nz/temporary/.../SZdUGRhA

https://mega.nz/persistent/.../pcUGFQYR

https://doc-14-c0-docs.googleusercontent.com/docs/securesc/kpgj27rlqooep7oa6ptipgglfddlditb/qrk3uunfnkeid63rsltqum11gbfejq1i/1473177600000/16936882053398032902/.../0B61HmghRVD_Ld2JLRktCV3g2TTg?e=download

blob:94BC2700-E986-4868-89BB-6A3CFFD6DB86

https://docs.google.com/a/.../uc?authuser=0&id=0Bz2EjZwsM2iYY3QwS0pKQWRyN0U&export=download

https://doc-14-5o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/spslrgolgkta6kbg80dvme9vg97uj1k9/1470088800000/13067073667452000433/.../0Bz2EjZwsM2iYY3QwS0pKQWRyN0U?e=download

https://mega.nz/persistent/.../5ckQ1IJL

https://docs.google.com/uc?authuser=0&id=0B2ogU9V9EfvLVGRkY3pfTjF3dUE&export=download

https://doc-14-5o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/ctt6i54li42jilka5c2ljabcpfucqqva/1468432800000/13067073667452000433/.../0Bz2EjZwsM2iYY3QwS0pKQWRyN0U?e=download

https://mega.nz/temporary/.../Dc80gTxI

https://mega.nz/temporary/.../5ckQ1IJL

https://mega.nz/temporary/.../pcUGFQYR

https://doc-04-4o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/e5nqnvei8317tr8fphn8ip27b9ip2qru/1440187200000/16936882053398032902/.../0B61HmghRVD_Ld2JLRktCV3g2TTg?e=download

https://docs.google.com/uc?id=0Bz2EjZwsM2iYY3QwS0pKQWRyN0U&export=download

https://docs.google.com/uc?authuser=0&id=0Bz2EjZwsM2iYY3QwS0pKQWRyN0U&export=download

https://doc-10-1g-docs.googleusercontent.com/docs/securesc/l2hoss6qghgmqrf63o1nssh7s33hckr5/mh0qef2i60pevlpaser7iu16i0efdsag/1450180800000/.../16149564523261783637/0B6m1NzFmfIFgWjJwcW1icHczSkk?e=download

https://doc-14-3k-docs.googleusercontent.com/docs/securesc/sa8pob53fv6rgqve420kaqk4ehbl8npv/2qt8ntu83jssu2kha41vv9kictldevia/1434578400000/16936882053398032902/.../0B61HmghRVD_Ld2JLRktCV3g2TTg?e=download&nonce=ms5hroj634jf8&user=05173733104397503962&hash=eeq80l4gkbsfraiedhia36u8l9153s6e

https://drive.google.com/uc?id=0B61HmghRVD_Ld2JLRktCV3g2TTg&export=download

Scan videoeditor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.