home

wpsetup_v4.46.exe

NCH Software

This is a setup program which is used to install the application. This is installed with WavePad Sound Editor. The file has been seen being downloaded from s6938.chomikuj.pl and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Description:
WavePad Sound Editor

Version:
4.46+

MD5:
cbe3a19d1b8b737aa6a9e16252689ea7

SHA-1:
207ce220d268e6761ed8f990fba5c734fea8703e

SHA-256:
35c8907a9cc56102f8ee6b884b0f3e637849924b42e032297ffa28606b93f343

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 11:39:12 PM UTC  (a few moments ago)

File size:
577.7 KB (591,536 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\nch swift sound\wavepad\wpsetup_v4.46.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
7/31/2008 3:00:00 AM

Valid to:
8/1/2010 2:59:59 AM

Subject:
CN=NCH Software, OU=Secure Application Development, O=NCH Software, L=Canberra, S=ACT, C=AU

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
4137AB6961BA34F584507F3F4AA6D7D2

File PE Metadata
Compilation timestamp:
5/7/2010 8:06:07 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:hXNo567jZTRP20u+sgbmj2TDjxbd6yfducxRHtmcaLIUZS6Vlf79W2k7:JNc67jZVe0u+rbmsvxbdgqU4UZljfze

Entry address:
0x2021

Entry point:
55, 8D, 6C, 24, 88, 81, EC, 5C, 0D, 00, 00, 53, 8D, 85, 4C, FF, FF, FF, 50, C7, 85, 4C, FF, FF, FF, 94, 00, 00, 00, FF, 15, 24, 10, 40, 00, 33, DB, 83, BD, 50, FF, FF, FF, 05, 73, 32, 6A, 24, 68, 78, 10, 40, 00, 68, A8, 10, 40, 00, 53, FF, 15, 64, 10, 40, 00, 83, F8, 06, 75, 11, 6A, 01, 53, 53, 68, E0, 11, 40, 00, 53, 53, FF, 15, 54, 10, 40, 00, 33, C0, 40, 5B, 83, C5, 78, C9, C3, 6A, 06, 53, FF, 15, 6C, 10, 40, 00, 8D, 45, E0, 50, FF, 15, 00, 10, 40, 00, F6, 45, 0C, 01, 75, 06, 66, C7, 45, 10, 01, 00, 8D...
 
[+]

Entropy:
7.9860  (probably packed)

The file wpsetup_v4.46.exe has been discovered within the following program.

WavePad Sound Editor  by NCH Software
The software may bundle additional potentially unwanted toolbars. - "During installation of this download you will be given the option to install closely related programs from the NCH Software suite.
www.nchsoftware.com
24% remove it
 
Powered by Should I Remove It?

The file wpsetup_v4.46.exe has been seen being distributed by the following 3 URLs.

http://s6938.chomikuj.pl/File.aspx?e=1iAWHKx6YXmix7W64oC37_w4uE4675CSuYlsOIXYpC-l_XcWcPLHKYk5jWiWY9eZHtbSKEm6V5jUZxPipCVHLHvMFkRfE-9rSd1d2RdmZj3sQVpHKHwwkCiokBj1sn0wgT1-bd_kaH4aM7aKPYQ6eA&pv=2

http://s10188.chomikuj.pl/File.aspx?e=1iAWHKx6YXmix7W64oC37_w4uE4675CSuYlsOIXYpC_Y9QXNOtk__4q8Q88x7xPaLgq4heIhLnCbYtIiE2kW63aAqKVl9JB9LJeqAm0I4KmB-uTFO5Xbcp1zQDJ35AfNL2y-ZUVVj4iVHAg8AuL_Cg&pv=2

http://s10188.chomikuj.pl/File.aspx?e=1iAWHKx6YXmix7W64oC37_w4uE4675CSuYlsOIXYpC8jTvHgTsqXBD9g0xx7IUxbkVKdEywZYAa03QtZ4IgthQ_DZQ2R_YoxtX9cwbUJUNKNGq9XyhTOyrXQCCWrShFxtuqbN32PEPF9XFP0KYJEDA&pv=2

Scan wpsetup_v4.46.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.