home

gwave558.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from goldwave.software.informer.com and multiple other hosts.
MD5:
13b23d6a0571f372ef1bd31557f2b963

SHA-1:
c514e962ea2b221f3ae450941e2b4ea999c6a45e

SHA-256:
2021bd298cfb8da7535e0d351367495f66efd47c869b7cdc39403b4178b4c169

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:56:05 AM UTC  (today)

File size:
3.5 MB (3,696,770 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\gwave558.exe

File PE Metadata
Compilation timestamp:
8/25/2010 6:52:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:eECf23JbEWors3Fnn7aQZO+WsY9zMNrZ62XDYfNK+Ngu:dC2Y4V7JQ+WlaLmUAv

Entry address:
0x1108

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 9C, 00, 42, 00, A1, 8F, 00, 42, 00, C1, E0, 02, A3, 93, 00, 42, 00, 52, 6A, 00, E8, F9, E8, 01, 00, 8B, D0, E8, 96, 27, 01, 00, 5A, E8, 34, 1A, 01, 00, E8, 8F, 27, 01, 00, 6A, 00, E8, B4, 37, 01, 00, 59, 68, 38, 00, 42, 00, 6A, 00, E8, D3, E8, 01, 00, A3, 97, 00, 42, 00, 6A, 00, E9, 63, C4, 01, 00, E9, E6, 37, 01, 00, 33, C0, A0, 81, 00, 42, 00, C3, A1, 97, 00, 42, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, A4, 00, 00, 00, 0B, C9...
 
[+]

Code size:
124 KB (126,976 bytes)

The file gwave558.exe has been discovered within the following program.

League of Legends  by Riot Games
League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.
www.RiotGames.com
12% remove it
 
Powered by Should I Remove It?

The file gwave558.exe has been seen being distributed by the following 28 URLs.

http://goldwave.software.informer.com/.../

http://dnlimit3.simfile.uplusbox.co.kr/.../httpdown.cgi?orgfname=gwave558.exe&filename=SS9WRVJDUnFULVdDSHVHMEs N3VLaU0wTHhhYUxPLmVIT0MuS3VYL0ppUXVLeGQ4

https://fs02n1.sendspace.com/dl/5bf3855e93c3f315f671a5f8e1344220/58940ff5789f1c79/.../gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1434698773&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FRlbKw7XXrQHG7w4pYjHzDcny35ykV7X9nbmWrTRwKgyXeKLamv7WKsfyM4ApC5H65Q2WLk17oxdsTdWTzBzl~huB267qFHrFxmdgAZGwhNgfUm~7C48nAqbatmlO~YMRSwRUSz5nrlhDYN5wkjyTE3E9Ahb4OyfMji6dW8wyt0_&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1476447278&Signature=P8gAYdHrJB4jZ~uuq-nm2xk8ycbFjaIYsHD0b56KkjLoMu7Ka7HCCIjBTLvzV-At7e3s9688ZnZtA7wlyl0SJaXhl34wh2NnORU~vmdmHjh75kblRH4dgf-Yt6bQlFXjgntrVPpsHvVXulnMpNrexVm044TLmWz27So7IF~tCUs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1437223280&Signature=Y26Fpic10ZKNmb8EV1pgKa354QYUONtF7RtrOwIuLK0wop39K5Ys5z0~qRCzsGnWEazAbFN36MWyY7huz0cUVEICSEoPgwqeTcgiM9UX5NrpKhDoWZfy30yhD2ZJ7txDp6MYwXX15EuVlt7Wl67kF4gzL3Oqnx8nNOTUpUMtY-M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_it&type=PROGRAM&Expires=1478748596&Signature=iM~hLm8gy62s5mRRhyZYpm5LAtmkhis7xTTgN4BBDcGdtSSDyC1f3gaWDHwdKyu~18gaNqP6UfMgXWnbkT84Zg2EnJ9AE7xDCJi7Ag-PmBH-p~et8~MOKhnUz2y42YIY-2Rzy35-A5lUcZ42ZkCndQ7-rBt~FtpsJW--4Qyqt~c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1477847517&Signature=EAI~u1gCdHQq1L20gt-qvQ15QkLaZNlpaT7pdhDyYRCbu0QwBLC1kUg0AO1kgexWYP5kgUmSThKK1JzJ8ts5xKEBVnC29EQ~Pw15PL0VZBarWoZI~~yEMY8uQf2-Tmzf6aVPBzZn0AwJe~djKi-3TMMH~QSq0lDOtgPuvfudiMY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1474296341&Signature=GkxJu8pnz~5KBrU3AjJjnMYh18M2MxqQAx4to~IYvo0u3aPcEEaGH3UxpNb4-ryEkYl-4Twoam2SMWWwbfcdIpVa4SifgwH2xhUgFT1-JrwsXqcjgy0QTF7LLKijMd1GVyhyYZqMgU-xaSeh64mMpMSNZDCHOLeQulfIiYa39E4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1438052261&Signature=dASV8XnB-GDJHWfmNzdaYF6-GjS8kB8DX4vF9wLS5Oss7PQEiQ-XHQvLJXkV6a2rruLGmQ8K-sEtPFxYC-0z0dEfp42In20w87MCD-xF7EYAduO~fH4OWtCoOaN0dIj4bAO7sEpPTH-dw0DbrwS1iVz2YWdBZgZRd-IVjYsbPTc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1478162673&Signature=YHAgeGtuvicSGbfzOwq0ZDGuZUxaUgHpQTX9qG3Z8kc7EdvaHLL-kptI~1GN-pAiNhpz12UKYDQwQCbH5D9AG0FV3humsAUbJRWDKpdcZ1Tmuu4UDiwhjQ0RE1zWHTrbmcpW2n6Qp4W3YTNb8L-2WipCCuzd5gz31i1VWp-Pn2U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1470902345&Signature=UHEG2edTHZ9ySu9xyU4yD17D1VvWnD20IP4STyb2EAFCye3ShUI7SH2nAI80eBKH-YB621jsdV~dKEMCQ3yCCcmQJOFKiM7UPTyzQmfbYahA0f5QSYgzzhrW7VTr-PlaBoYBGovjg2I0UEgy8FKgjJZ3e-yyimWNjMSsfHW7sCw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1476945902&Signature=JXcpgcYTc34sABNQXvYk66S2KVn0DanzooO-yNa3ucLXI5XwtBcRl7hVZVM7sqL-0E84gQJlbmN7zH7LK7hQ7TD41YaL~DeaWsjAg7LsvSvw7j1EU3Q5MZ9hv6zTbsNkcWHIk~iEerb7LqxlutMF1904jLKoJJLSy0JMTR6-4ng_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1481497690&Signature=hUYKJaV7BRBslTo1Zh4xlYqerL0aPB-ml03UGpJ03guPTsumq4jwi5ZrI6jFs0ZoeOv4mD0Z~SAXjYcBO5Du8hgaepg-s9MSHtOwWLD4yMM~dxOL0HpX-G2~NtCwaV4TgNJO463-xzr8ogXmdDXwY19xAwCM8POiojiKMShAc6c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1476167320&Signature=MazIPULaN2H4HC6xkV8itPJT2kfRRkUNOvqcPLBb5-ymS7grsJ0CaEAQM5tk-1iokfzbL0iUWhutw8edl4w9bbzq8kFuE-dYOH1WsFTrt6y~GMT0eK269Wi4jU8JN8XcIE8Xaf~CjGouVweVfGTf~-ZKZFvVfrsbi~O6-cHE8Sk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1473777925&Signature=bkNdDrZi5ogS~7uT5RjLB8xcHJZUd2cgmgD5X9pljYAzhiN-yaz96GbKtKG-thy7r~g3SN-P1U-hA8pfcynTEkvxQDTcmpmuFu9znJsLELrRU5byHunc2wu55g8-ZC3JNF~mjOLFG51ihmIfTvhGJfRhw8AuNWUVA9jgIJ7p24E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1475841565&Signature=BRx2qOFIs41MEDdDwJRssm5OM5gfDGg8yupqikvRO2BlDzlyC9syjci7LyzYRqIr6PXuhN9-~tvQijE9r45iD7do0Pr7sQsImBU9D9aFTAXpSimXab0l5nxmLL8aq1KNgEhcfkCaoxDIWdN5CYTArHyn7qgSqsQjNr1zZTR2xjs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1441431682&Signature=DP9czStf5fMe~X8~P0Cg3F4csZ8RCzj7sYEtTVfnIMdpwp2e6t35TLGF4WwDJmaWKdE1W7nHUC7DD2XT~s9TwZNaKq7ffWOY3-0pM-UT7YXxR4SxLvA7EHvY0EZAY86uv935RQVR7K9Rx9jwUkTIbEXlPh~pYQRSWvGAvd55I9s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1472624877&Signature=U7AvfL6nD~8RNO6GMJVjbu2KsGmGxwswuhGQFdgst~HLkrBshbcACs~Z8g4c6Rlpj~M0Rf-~k8-TxGw5Or5z9H7huDreGC3EONZ68xeiK6KV3nbrDzlTLZs661hpXSgO3O0-EQYmsNdPMm0-scqiM51IgxVF5lz4ygAqQ6RFu2I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1471401036&Signature=bn-0zLU6611vl-fFZ4jM~V7jQkYx0R3BUD3YvQZ~a0eAyGaWNc4DT3BtVNeYEeSlWaOTu4HU~hFphIIaooer0wNCGaKznvVkWYwjiZtQy4q7lGoWkX9Lxu9PjlNdHZXi8~hH3iCBuZ2xApbDTZq1lqm3EBhrsevWFP9aCfDpO3M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1435941438&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FyMkQDHWvcpyU9VraGmcd2ctA45Ax-3XwFD12NZ0IeTBJNmD4ItgXmuwqckMvMBi5~GfhDHwcFKCZknmqWnv8a35xYQ3QWCaYOw50cSJ6ZlnG5q7yId7F0bXuLgpZUGmLa6K6gnd047Nau0hWuQ-qV~fqbg8ViL82ZDk-th3mDw_&filename=gwave558.exe

http://download1079.mediafire.com/d36s1m6026ag/.../gwave558.exe

http://www.destinydreamnowbits.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

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_es&type=PROGRAM&Expires=1440435333&Signature=CWPxv0XUMqsGmjPCiGuw6B99yLn0U7lJSiMUnm6xV4nbbG3iQqxixqbgH4G2BYrFYgQXnyrmAE0oTXWYfTtXGUR7FiWFAf7~z~e5JHewBoBhvSwWCI9-1~3w0gk4ie4gxqlJdYFwmFeyej31fRvv3qsoHRJnhkCUUXdj1GVrJrE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://gsf-cf.softonic.com/c51/4e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_it&type=PROGRAM&Expires=1451960793&Signature=AoZuJjIFF13YJX9o49E-JIExoi1OjcIcUs65BsJl8MEj3CR9YtLrEDG6V0xAt-QFtUzOPsOMbkNHkpW5S9ExyDPqqZrIZXfCVlAzFrGIS5hoRGfoWsEU2oeynnnTeP8s2McSpK48c8pYf86w9MsxECqaoIUp9WZsZ0N0VlNWMjE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=gwave558.exe

http://www.goldwave.com/.../gwave558.exe

http://software-files-l.cnet.com/s/software/11/54/65/.../gwave558.exe

http://www.goldwaving.com/.../gwave558.exe

Scan gwave558.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.