home

gwave569.exe

GoldWave Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from s6157.chomikuj.pl and multiple other hosts.
Publisher:
GoldWave Inc.  (signed and verified)

Description:
Installer Program

Version:
1.2.0.0

MD5:
a45ce113a512e12af31a03cd16e1dfa0

SHA-1:
e24690b09c4048326c3afc74640ab4a1d7631635

SHA-256:
1715267d98d17f6b31712c0a05612ceeaccad6379c19394c0243392f8beb6f9d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:18:41 PM UTC  (today)

File size:
7.8 MB (8,147,408 bytes)

Product version:
1.2.0.0

Copyright:
Copyright © 2012 GoldWave® Inc.

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\gwave569.exe

Digital Signature
Signed by:
GoldWave Inc.

Authority:
COMODO CA Limited

Valid from:
2/11/2013 2:00:00 AM

Valid to:
2/12/2016 1:59:59 AM

Subject:
CN=GoldWave Inc., O=GoldWave Inc., STREET=PO Box 21151, STREET=2 Third St., L=Mount Pearl, S=Newfoundland, PostalCode=A1N 2A5, C=CA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C841B3B3082E2D32168F332C83DA49EF

File PE Metadata
Compilation timestamp:
5/31/2013 9:36:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
196608:EmItfI50tdfX9VI7O9DmdE7AwvZWjER4JITp4MqEVa01Au:ERjfX9VlCE7HZsEZXqEs01N

Entry address:
0x1104

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, AC, C0, 42, 00, A1, 9F, C0, 42, 00, C1, E0, 02, A3, A3, C0, 42, 00, 52, 6A, 00, E8, D3, A0, 02, 00, 8B, D0, E8, 0E, D8, 01, 00, 5A, E8, 48, BE, 01, 00, E8, 07, D8, 01, 00, 6A, 00, E8, C4, EA, 01, 00, 59, 68, 48, C0, 42, 00, 6A, 00, E8, AD, A0, 02, 00, A3, A7, C0, 42, 00, 6A, 00, E9, 7B, 7B, 02, 00, E9, F6, EA, 01, 00, 33, C0, A0, 91, C0, 42, 00, C3, A1, A7, C0, 42, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, A4, 00, 00, 00, 0B, C9...
 
[+]

Entropy:
7.9878  (probably packed)

Code size:
172 KB (176,128 bytes)

The file gwave569.exe has been seen being distributed by the following 9 URLs.

http://s6157.chomikuj.pl/File.aspx?e=eMiLztPlwL7yKYxBtRu5t2CJaJ7U1VJQHfesu0c8InBVZ-2DdjrwkbI3XimNBuKrHTMBbfgh3523kVBygmy028ndZQMYE4oBlKh0kwj7YtaTfrdGTUqbocEdg20rT16qGjQZch1nvD2ycKqAH-K-BkTmWKYaqMty3DZ9nv6U3_jcE1tTknVBQqujiZCSh6SL&pv=2

http://low.software.dn.naver.com/f4b6ad4977ab8009690176bd4ebbf8c8/.../gwave569.exe

http://qpdownload.com/download.php?name=GoldWave

http://w.x.baidu.com/alading/.../16035

http://s6157.chomikuj.pl/File.aspx?e=eMiLztPlwL7yKYxBtRu5t2CJaJ7U1VJQHfesu0c8InCY_qpRMcyfD2Du0qKQ3IZbbAdRDJSAnQEn4tyIHNZry6uzBORB4RyyMbTuewKbOjRj74Ul5reAT5vc9KjXXBr7IjBttR9vu13JZnDl4JnDw8roHtTnC0Zw_5kQuukxGBQjxZClXBXnB6W5Cf7dBO4-&pv=2

http://www.geardownload.com/download.php?url=http://www.goldwaving.com/.../gwave569.exe

http://s6157.chomikuj.pl/File.aspx?e=eMiLztPlwL7yKYxBtRu5t2CJaJ7U1VJQHfesu0c8InCmCN9PvNzs0QxvpeIMlaWbkQwOancRLcZWxIlHSnqOF3BxZ6ySyA2Q9Zk92In57jgHlMKIQ7bSk5en95kDb5GvkhnFOWhvSQCW8YHYvMYWAeba8TRPN9vjje0dzCl9w1rcAlfF-B1wjgKSiex09e3i&pv=2

http://www.goldwaving.com/.../gwave569.exe

http://software-files-a.cnet.com/s/software/13/12/35/.../gwave569.exe

Scan gwave569.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.