home

wpsetup_v5.01.exe

NCH Software

This is a setup program which is used to install the application. This is installed with WavePad Sound Editor. The file has been seen being downloaded from software.oldversion.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Description:
WavePad Sound Editor

Version:
5.01

MD5:
634827c35b91f9a6c3874d2bc5982d3f

SHA-1:
9e1aec79874aeb419b21d274fb23cd9fa7e6a834

SHA-256:
e3c5724881b18368b8aebf5ceede7029609048620143e1ed088beabed0d33230

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 2:19:52 AM UTC  (today)

File size:
817.1 KB (836,696 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\Program Files\nch software\wavepad\wpsetup_v5.01.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/28/2011 2:00:00 AM

Valid to:
8/3/2013 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
24523FA51F145E53F931EEE4A4CC7E4C

File PE Metadata
Compilation timestamp:
8/2/2011 6:57:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:Lpu+oPPFzMAryNyQ4OUqVeiBPmDVOaHXUzsBhdwwwg++JiwstmPgPjMZ6Rfud/mJ:LpXsM5osyCOD0aEzPm+RghZ6Ri/m

Entry address:
0x2025

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, 6C, 0D, 00, 00, 53, 56, 57, 68, A0, 10, 40, 00, FF, 15, 24, 10, 40, 00, 68, B0, 10, 40, 00, 50, 89, 44, 24, 18, FF, 15, 00, 10, 40, 00, 33, DB, 3B, C3, 89, 44, 24, 0C, 75, 3D, 6A, 24, 68, C4, 10, 40, 00, 68, F0, 10, 40, 00, 53, FF, 15, 74, 10, 40, 00, 83, F8, 06, 75, 11, 6A, 01, 53, 53, 68, 30, 12, 40, 00, 53, 53, FF, 15, 6C, 10, 40, 00, FF, 74, 24, 10, FF, 15, 34, 10, 40, 00, 33, C0, 40, 5F, 5E, 5B, 8B, E5, 5D, C3, B8, 9C, 00, 00, 00, 8B, D0, 8D, 8C, 24, A8, 00, 00, 00, 88...
 
[+]

Developed / compiled with:
Microsoft Visual C++

The file wpsetup_v5.01.exe has been discovered within the following program.

WavePad Sound Editor  by NCH Software
The software may bundle additional potentially unwanted toolbars. - "During installation of this download you will be given the option to install closely related programs from the NCH Software suite.
www.nchsoftware.com
24% remove it
 
Powered by Should I Remove It?

The file wpsetup_v5.01.exe has been seen being distributed by the following 8 URLs.

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3NjM3MjA3NDtzOjI6ImlkIjtpOjQyNzg7czo0OiJmaWxlIjtzOjI4OiIzLjEuNV9XYXZlUGFkQXVkaW9FZGl0b3IuZXhlIjtzOjM6InVybCI7czo0NjoiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3dhdmVwYWQtNS0wMSI7czo0OiJwYXNzIjtzOjMyOiJiYzQyZjMyZWVmMzhiMDhlZjU2MDcwOGIyNTYxODk3NyI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2MjM0NjY4MjtzOjI6ImlkIjtpOjQyNzg7czo0OiJmaWxlIjtzOjI4OiIzLjEuNV9XYXZlUGFkQXVkaW9FZGl0b3IuZXhlIjtzOjM6InVybCI7czo0NjoiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3dhdmVwYWQtNS0wMSI7czo0OiJwYXNzIjtzOjMyOiJmZTgzZmQ5ZWI1Njk2ZGQ3NGNjZjcxNzg5OWNiZGRkOCI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1NjI4ODk0NTtzOjI6ImlkIjtpOjQyNzg7czo0OiJmaWxlIjtzOjI4OiIzLjEuNV9XYXZlUGFkQXVkaW9FZGl0b3IuZXhlIjtzOjM6InVybCI7czo0NjoiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3dhdmVwYWQtNS0wMSI7czo0OiJwYXNzIjtzOjMyOiJlZWZhZjQ4NzIwNTY1Mzk1YjI2MDk3ZjJmYzM4NDk0MiI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQyOTEyNzgxMjtzOjI6ImlkIjtpOjQyNzg7czo0OiJmaWxlIjtzOjI4OiIzLjEuNV9XYXZlUGFkQXVkaW9FZGl0b3IuZXhlIjtzOjM6InVybCI7czo0NjoiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3dhdmVwYWQtNS0wMSI7czo0OiJwYXNzIjtzOjMyOiJmZDg3YmJmYzI2MWU2YmY0MGM3ZWMzMDI5MTQyNTU2NCI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQzNjIxODY0ODtzOjI6ImlkIjtpOjQyNzg7czo0OiJmaWxlIjtzOjI4OiIzLjEuNV9XYXZlUGFkQXVkaW9FZGl0b3IuZXhlIjtzOjM6InVybCI7czo0NjoiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3dhdmVwYWQtNS0wMSI7czo0OiJwYXNzIjtzOjMyOiJkZTM3NDg4MjIzZGZhYjJlMTBiMjZlMGYwN2IxMDdhYSI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1MjcyMzQyNTtzOjI6ImlkIjtpOjQyNzg7czo0OiJmaWxlIjtzOjI4OiIzLjEuNV9XYXZlUGFkQXVkaW9FZGl0b3IuZXhlIjtzOjM6InVybCI7czo0NjoiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3dhdmVwYWQtNS0wMSI7czo0OiJwYXNzIjtzOjMyOiIzOGM3ZDJmNGM2OTRlYWQ4MTIwOTdiMWYyZjNhNjg5NyI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQzNTE4ODM5NTtzOjI6ImlkIjtpOjQyNzg7czo0OiJmaWxlIjtzOjI4OiIzLjEuNV9XYXZlUGFkQXVkaW9FZGl0b3IuZXhlIjtzOjM6InVybCI7czo0NjoiaHR0cDovL3d3dy5vbGR2ZXJzaW9uLmNvbS93aW5kb3dzL3dhdmVwYWQtNS0wMSI7czo0OiJwYXNzIjtzOjMyOiJjN2I4Yzc2ZTQ2ZTRkZDY3Zjg1NzM3Mzk5MzJjMmEzNiI7fQ==

http://www.nch.com.au/.../wpsetup.exe

Scan wpsetup_v5.01.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.