home

gwave566.exe

GoldWave Inc.

This is a setup and installation application. The file has been seen being downloaded from www.goldwaving.com and multiple other hosts.
Publisher:
GoldWave Inc.

Description:
Installer Program

Version:
1.2.0.0

MD5:
25ef42b495e098094c8993e1d869ca21

SHA-1:
5d3cddff7121270455279cec2e1ce73db3fea808

SHA-256:
6695a5d82f5e09f1dc0883263ccd119734754aca5d4ae404116d10bdf840cedb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:04:16 PM UTC  (today)

File size:
6.4 MB (6,678,858 bytes)

Product version:
1.2.0.0

Copyright:
Copyright © 2012 GoldWave® Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
1/20/2012 1:08:36 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:rIZMAtvH/EG7H3IUYEAPJ0Z4jOcnWujviTTYCcjzLPQS2Ln+yn1ow62USLqARhCv:MZ/1/Jb3+PJqcWuj0HcjPPQYip3LC1gU

Entry address:
0x1104

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, AC, C0, 42, 00, A1, 9F, C0, 42, 00, C1, E0, 02, A3, A3, C0, 42, 00, 52, 6A, 00, E8, 1F, 9F, 02, 00, 8B, D0, E8, AA, D6, 01, 00, 5A, E8, E4, BC, 01, 00, E8, A3, D6, 01, 00, 6A, 00, E8, 14, E9, 01, 00, 59, 68, 48, C0, 42, 00, 6A, 00, E8, F9, 9E, 02, 00, A3, A7, C0, 42, 00, 6A, 00, E9, C7, 79, 02, 00, E9, 46, E9, 01, 00, 33, C0, A0, 91, C0, 42, 00, C3, A1, A7, C0, 42, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, A4, 00, 00, 00, 0B, C9...
 
[+]

Code size:
172 KB (176,128 bytes)

The file gwave566.exe has been seen being distributed by the following 3 URLs.

http://www.goldwaving.com/.../gwave566.exe

http://gsf-cf.softonic.com/5d3/cdd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9893&instance=softonic_de&type=PROGRAM&Expires=1435902646&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=iT7FhyvY5UYnKPBcd2W4gsIzHdvtBu6CYcZU1j9vNfmOKZcB7Zoa3zjgVegcVY4nTcX6nnRacsEGs65CFuPHwb1mgJXKzSR7JRR4W9PhdRx1qDq0lCbNAUYrvtPKHAyk7Je9CWoaz8C~AC~X~m8NOzKYQYokQ21em5aswqPCy1k_&filename=gwave566.exe

http://software-files-a.cnet.com/s/software/12/32/96/.../gwave566.exe

Scan gwave566.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.