home

installvideomeld152.exe

GoldWave Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from www.goldwaving.com and multiple other hosts.
Publisher:
GoldWave Inc.  (signed and verified)

Description:
Installer program for GoldWave software

Version:
6.0.0.0

MD5:
c97c1676c060e0bd706986d9db52aaa5

SHA-1:
c689ddbb05e6fd907f50374541ebad7428803174

SHA-256:
83cf890ff1a15b99baff66f156d709c6df7070cdc003154ae65ca18420b23060

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 11:57:27 AM UTC  (today)

File size:
9.9 MB (10,347,912 bytes)

Product version:
6.0.0.0

Copyright:
Copyright © 2015 GoldWave Inc.

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\installvideomeld152.exe

Digital Signature
Signed by:
GoldWave Inc.

Authority:
COMODO CA Limited

Valid from:
2/11/2013 8:00:00 AM

Valid to:
2/12/2016 7:59:59 AM

Subject:
CN=GoldWave Inc., O=GoldWave Inc., STREET=PO Box 21151, STREET=2 Third St., L=Mount Pearl, S=Newfoundland, PostalCode=A1N 2A5, C=CA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
41D9ECDE69352B9543C2830DA1AB58D3

File PE Metadata
Compilation timestamp:
9/24/2015 1:59:59 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:fwMt3rdXpbKYtq8zgrVpT3yk7S/74EevbA5+IRnW0byCBOcE:IMt3rbuYPefT3yk7Sj4EevbUXReCM1

Entry address:
0x11A0

Entry point:
6A, 00, 48, 31, C9, E8, 0E, 53, 08, 00, 48, 89, 05, EF, CE, 08, 00, E8, AA, 22, 06, 00, E8, 15, 6C, 05, 00, E8, B0, 22, 06, 00, 48, 8D, 05, 39, CE, 08, 00, 48, 8D, 0D, 32, 39, 00, 00, 48, 89, 48, 30, 48, 8D, 0D, 27, FE, FF, FF, 48, 89, 08, 48, 8D, 0D, 61, FF, FF, FF, 48, 89, 48, 08, 48, 8D, 0D, 56, FF, FF, FF, 48, 89, 48, 10, 48, 8D, 0D, 9F, FF, FF, FF, 48, 89, 48, 18, 48, 8D, 0D, 8C, B6, 07, 00, 48, 89, 48, 68, 48, 8D, 0D, E1, BB, 07, 00, 48, 89, 48, 70, 48, 8D, 0D, 96, BD, 07, 00, 48, 89, 48, 78, 48, 8D...
 
[+]

Entropy:
7.9444  (probably packed)

Code size:
536 KB (548,864 bytes)

The file installvideomeld152.exe has been seen being distributed by the following 2 URLs.

http://www.goldwaving.com/.../InstallVideoMeld152.exe

http://goldwave.com/.../InstallVideoMeld152.exe

Scan installvideomeld152.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.