melodyne.demo.3.2.1.5.setup.exe

InstallShield

InstallShield Software Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from www.towerbitscenter.com and multiple other hosts.
Publisher:
InstallShield Software Corporation

Product:
InstallShield (R)

Description:
Setup.exe

Version:
10.01.244

MD5:
9cfe1b79848f569dd4a8d603ad402e0e

SHA-1:
e8caa6acb5a02c99791f54558f4bd1daec143ca9

SHA-256:
ca7229e67c87293f3bac0b539293bb1a915bce8cc76ee43b9e11c0eb8f7ba54f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:55:19 AM UTC  (today)

File size:
38.3 MB (40,206,986 bytes)

Product version:
10.01

Copyright:
Copyright (C) 2004 InstallShield Software Corp.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\melodyne.demo.3.2.1.5.setup.exe

File PE Metadata
Compilation timestamp:
3/24/2005 4:37:34 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:oY/1L9LBX2cMhmRir+y4bmIOhzQuYyFwgolgkXYM:oYhZBXfRtrmIezjYooekXYM

Entry address:
0xCE02

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 58, 21, 41, 00, 8B, F0, 85, F6, 75, 08, 6A, FF, FF, 15, 54, 21, 41, 00, 8A, 06, 57, 8B, 3D, 88, 22, 41, 00, 3C, 22, 75, 1B, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 04, 84, C0, 75, F1, 80, 3E, 22, 75, 15, 56, FF, D7, 8B, F0, EB, 0E, 3C, 20, 7E, 0A, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, 8A, 06, 84, C0, 74, 04, 3C, 20, 7E, E1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 50, 21, 41, 00, F6, 45, E8, 01, 5F, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF...
 
[+]

Entropy:
7.9971

Packer / compiler:
InstallShield Custom

Code size:
66.5 KB (68,096 bytes)

The file melodyne.demo.3.2.1.5.setup.exe has been seen being distributed by the following 11 URLs.

http://www.towerbitscenter.com/9THbJzpgFvnLzautq4Bk6Xu0uVzOhEB6 SnMYO3Nnqm0efIU1bKwxNyU_gemYxZlMml71_s2qB Dln2HEpV1HYGShpKPE4a2 y90TYciUwX9Bg1UdZ9i87Ebb0NqfYlXKNdTcnPQROLaWwK8neBpjd6xZMcK9fybWFfymrWUfI2q2HNykPYG4FqUZ5 Tb KyNsht5mmj0vQe3zjganGMMoDi5nmAF0uTFUuc2bRT0ixXs3lx84A=-G1AAAMTyFtv9MKGpkhC59u9t2HCM40H1XkYdwAYZNsaW4_mKyG s9hqdSvP5I3H8x5ZK9fEnC80lIcoAYCAgo_HcBT4C

http://www.ranchsendgift.com/0zQD3HjmFUKrJX2nLj6IoSBtREKVgAKJeM1eFJHBZK FelKqih32uSUjE7BcyOALQaw2kTQvbE_k95Dby8nv6btUbnPIxROMwBl4kkmv5FvCD7OP 5ao zz _uTC4qIk2vjm QsSvdZIeMi0ddmsprGpk_UUn_mlnvn6C267pD8YqUS_foUWvF1tw5BDM40VPPIUUSy1Jodf1JFj4EBsKxT73GSbiw==-G1AAAMTyFtv9MKGpkhC59u9t2HCM40H1XkYdwAYZNsaW4_mKyG s9hqdSvP5I3H8x5ZK9fEnC80lIcoAYCAgo_HcBT4C

http://www.towerbitscenter.com/I7CCWzUXCv pnmO8 qy_BPVwxWXXgf92MOrHN4rV urYbyhaZsYsECLaA8mrIPQgWA3qYpxqvbVNxwMtHBXFqd5VLyViRQqMZr6wLH6bVD6N4Hd0IKIKjjEde8Jeeydr AtADaWDTMRl8KMVUKM8f0JIRyaSYGriKoJeUpMfNhSL6tYTm70ASvwQdIHyqni2abKrsQArJi4ktTQEZBdZ2E4aEvjSGA==-G1AAAMTyFtv9MKGpkhC59u9t2HCM40H1XkYdwAYZNsaW4_mKyG s9hqdSvP5I3H8x5ZK9fEnC80lIcoAYCAgo_HcBT4C

http://www.ranchsendgift.com/7VAGwxWQiuuXdcksc3EbHJ7s6H5Zr_MvkpkPwhSDAx2gfVHWJUgsv1PO0tD9YAgVHTWHFhrsdjU54IVpif8kBexqfO4Mu3Ek4Y9mrtZ973fpmEJOe iiPmAwfKBI5e0cMhFUmQNEYgN_sQ0CYN55R0hmJeJv0aZIDltwuS1sMpFamm2_xfXDHIylm15RbN5AQMEJkT4Iw9FIvdwd0Ong17sNerId_w==-G1AAAMTyFtv9MKGpkhC59u9t2HCM40H1XkYdwAYZNsaW4_mKyG s9hqdSvP5I3H8x5ZK9fEnC80lIcoAYCAgo_HcBT4C

http://www.ranchsendgift.com/rqyRetgUVF fGqL0HTYVAeuSpavpVZDPV8tvYEJNbXzM3j8Do7uSRWafvcZ7EYmX_7TGR583EXY9iBS6NWcu5Yb1lx3gBEZXxboLH5pvtX0aTBhVzovtnYyETBk34JG974yzW2uojeyBbcJvFYVecN77GMalpelORRRgK jOi39z41SUSqrD7atx6WbsURf v_uMhwOJTpjCPlbX_LkQVGwmTr7zow==-G1AAAMTyFtv9MKGpkhC59u9t2HCM40H1XkYdwAYZNsaW4_mKyG s9hqdSvP5I3H8x5ZK9fEnC80lIcoAYCAgo_HcBT4C

http://www.towerbitscenter.com/bI_CYGEC rKSor448zu03zaQ7HA5joqybQVaIDUE6doTM1FvcOeBgZN3lQl8_hcJjGB2lHa8VzYl_CBudsqtKLcDmPIKIzukYG467 9_sH_y_Eu h0G0ZLUYpGOc2kMG1b3I0B0dSmG2rrxbHoo1oBbVz_HJyjHMs3UBlavz08z9jAzeo3abSQuvS7TDEma9f9dYlhtIU2TdxpsOhnrHCs0MuOlshg==-G1AAAMTyFtv9MKGpkhC59u9t2HCM40H1XkYdwAYZNsaW4_mKyG s9hqdSvP5I3H8x5ZK9fEnC80lIcoAYCAgo_HcBT4C

http://www.ranchsendgift.com/htX QBQHCAKdBzTnSMnFI_SYJKcFJSdXQDf3 g06PKMcW3veZg41PQ0i1BwQY6IQGjnqco0k7aM3GAfeUVytINgA_tZI6bIuhA9n9AtH3VsBSkVuoQHrkEL1VKckKFWfoFOWKp3nvvKdupqCy_qT3MWtEB5qTBj4QQQ4t8Qnqzbj15ZK3O7LKKMrEWLL4YZMJZ0aqHsof8u_y 4Ou5r RxSdC_Ts5YJKdKLc9M_ IspbkYwnWA6djh0VMjxu3iP1LXFZqcckANLHEfAbg3aziL1YEwTvqrC 4trkOLgv_5VL2SCI66Hi3aZSM7J_2O2ZpN MEWUwpoNa88VQmKKet 1RWAOGsNkYTXISCabUXYM6GTLCR96H1liR9n5qPidmIwW L_8PEID8CDHcDID0Cs3GFMZh kI3cuP4V73clqWhW5U wVNInDBMl0h34PNoYi5Cqky4nMcCS8xVyEc_vN_QP36GXXu_6qQLdOpv2jEJddsaOZB98lV2NuCd16TDmRVgQ3wi_jcWyGkkp0FdSH9xwm5GJw==-G1AAAMTyFtv9MKGpkhC59u9t2HCM40H1XkYdwAYZNsaW4_mKyG s9hqdSvP5I3H8x5ZK9fEnC80lIcoAYCAgo_HcBT4C-e

Scan melodyne.demo.3.2.1.5.setup.exe - Powered by Reason Core Security