wavepadrefsetupsoftonicen.exe

NCH Software

Publisher:
NCH Software  (signed and verified)

MD5:
753b372b70d755a5c42b86631e5a6a23

SHA-1:
014f7d04833256ff897415fc8a703e782058fd0c

SHA-256:
559dd836094847b0220d270b3522de726d33075a4488310f705f47c544370f53

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:50:11 AM UTC  (today)

File size:
1 MB (1,094,400 bytes)

Common path:
C:\users\{user}\downloads\wavepadrefsetupsoftonicen.exe.obu2p68.partial

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
7/5/2015 5:00:00 PM

Valid to:
8/6/2017 4:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
58D9B9D38780932DD1CBC58A2AD28B1C

File PE Metadata
Compilation timestamp:
9/30/2014 5:46:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:Ms6t3qu546ane4JQHP0C/zXFmWxGCi3gUosVMFGSdQ3VYOIln7uXXnIBN:uJ546anI/zXYW8CiQUYFGEGYbuXY7

Entry address:
0x209B

Entry point:
55, 8B, EC, 81, EC, 20, 04, 00, 00, 53, 56, 57, 6A, 63, 8D, 75, F0, E8, AA, FF, FF, FF, C7, 45, FC, 01, 00, 00, 00, 33, DB, 8D, 85, E4, FC, FF, FF, 50, 68, 04, 01, 00, 00, FF, 15, 1C, 10, 40, 00, FF, 75, FC, 8D, 85, E8, FD, FF, FF, 68, 64, 10, 40, 00, 50, FF, 15, 44, 10, 40, 00, 8D, B5, E4, FC, FF, FF, 8B, C6, 83, C4, 0C, 8D, 48, 01, 8A, 10, 40, 3A, D3, 75, F9, 2B, C1, B9, 02, 01, 00, 00, 3B, C1, 76, 02, 8B, C1, 33, D2, 3B, C3, 76, 31, 8A, 0E, 46, 3A, CB, 74, 0C, 88, 8C, 15, EC, FE, FF, FF, 42, 3B, D0, 72...
 
[+]

Entropy:
7.9884

Developed / compiled with:
Microsoft Visual C++

The file wavepadrefsetupsoftonicen.exe has been seen being distributed by the following 25 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=171e600b33cb3c812c36291f2cf5c3d6&upv=d042126e362ba51376042da4f8e28d7d&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037875110972BF7A839CB0F66E2C97FD00B6574501B63D370902D233F5EDD596614E514D1B9BA872049177E2111CFF525D0F8A554CD99674F14F7BD9B4E57EB73BC44F7688319A980D51D2FFAA761D81C121D798D985B4C2AFBA1CB41D2AC5B7432842F4DA74BDAE610CFDE28B889F99EFE02B32063F0FE5BAD141FD44C53118B7791BCB5E61C36F0508370D9255CC9A6F&h=B58B458D469AC77BB4A226FFFD08D4037CFB98FA5CB76461790672CD7FB944D9&directdownload=1&f=34642&d=http://www.nchsoftware.com/.../wavepadrefsetupsoftonicen.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=58bcff799be27dd76ecf59232a214d05&upv=3b7b3b1a79e30d58560cddfb971cc8eb&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037875110972BF7A839CB0F66E2C97FD00B6574501B63D370902D233F5EDD596619A037FFAF4946D4069C6D90D4A7FB6BCCB9ECF5DDD7A9E15590CFEC35AF56E4FEB39437F0C8740C00EB0F84D26A1D684DEFC6BFCBFFF0BBE9AD3F18006A27BBDB5166826874D65AE8161BC1CFE7A5D55FC3B4A87A84CDD6CB47C4A5D453DFF8072B7097C4CD1D6F30CD3D8C2034BD9F4&h=026345F5CFC6A7F0DCF6733518B645A0CDBC19538A5EBF98B25755FAE43CBB0F&directdownload=1&f=34642&d=http://www.nchsoftware.com/.../wavepadrefsetupsoftonicen.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=781de69da58a20bb32f1573990ff369b&upv=5531e58e97ffa433119658bfdda9a30b&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E037875110972BF7A839CB0F66E2C97FD00B6574501B63D370902D233F5EDD596619A7CBB815F1BA58A48205A4D65C246E7ADA8FD3C41625ECD71C4CC3076DDB4DE03C3E68C989AA4B9F56A2FD1F323F039A6B98D0C8F412545BF3A1DD33FF2CAF598D1AE9F1C205EA7D2714F68A37E028A7EAF85E934DB579C68FDB333C8C050B56B22E7E48F68797A6F791F91DD8D9C0B&h=584894D6DC5D1172669952A3947C044B56875580979BF1BE937B6CE7191422BA&directdownload=1&f=34642&d=http://www.nchsoftware.com/.../wavepadrefsetupsoftonicen.exe

Scan wavepadrefsetupsoftonicen.exe - Powered by Reason Core Security