installvideomeld154.exe

GoldWave Inc.

This is a setup and installation application. The file has been seen being downloaded from goldwave.com.
Publisher:
GoldWave Inc.  (signed and verified)

Description:
Installer program for GoldWave software

Version:
6.0.0.0

MD5:
510059d375ba8c34876b8e5fee18bebd

SHA-1:
d5cc620aa7a3866299acb9c09cc326d66e925cab

SHA-256:
f19f7b5a2b2bb43355ff7ece6a753227ca8b39fc7a083395fb014f97265fbba0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 5:14:11 AM UTC  (today)

File size:
9.2 MB (9,627,976 bytes)

Product version:
6.0.0.0

Copyright:
Copyright © 2015 GoldWave Inc.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\installvideomeld154.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
2/26/2016 1:00:00 AM

Valid to:
2/26/2018 12:59:59 AM

Subject:
CN=GoldWave Inc., O=GoldWave Inc., STREET=2 Third St., STREET=PO Box 21151, L=Mount Pearl, S=Newfoundland, PostalCode=A1N 2A5, C=CA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C120BEF1D673AC26D471A5957DE3A582

File PE Metadata
Compilation timestamp:
3/10/2016 4:38:16 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:ueX+G6jUj3t0liPy7VZXNnGJR6HBNIwsMnl7:rX2ji+HfG6YwsYx

Entry address:
0x11A0

Entry point:
6A, 00, 48, 31, C9, E8, BE, 26, 08, 00, 48, 89, 05, EF, 9E, 08, 00, E8, 5A, F6, 05, 00, E8, C5, 3F, 05, 00, E8, 60, F6, 05, 00, 48, 8D, 05, 39, 9E, 08, 00, 48, 8D, 0D, A2, 1F, 00, 00, 48, 89, 48, 30, 48, 8D, 0D, 27, FE, FF, FF, 48, 89, 08, 48, 8D, 0D, 61, FF, FF, FF, 48, 89, 48, 08, 48, 8D, 0D, 56, FF, FF, FF, 48, 89, 48, 10, 48, 8D, 0D, 9F, FF, FF, FF, 48, 89, 48, 18, 48, 8D, 0D, 3C, 8A, 07, 00, 48, 89, 48, 68, 48, 8D, 0D, 91, 8F, 07, 00, 48, 89, 48, 70, 48, 8D, 0D, 46, 91, 07, 00, 48, 89, 48, 78, 48, 8D...
 
[+]

Code size:
524 KB (536,576 bytes)

The file installvideomeld154.exe has been seen being distributed by the following URL.

Scan installvideomeld154.exe - Powered by Reason Core Security