Gridinsoft Logo
File Icon

The wavebrowser.exe (WaveBrowser) File Analysis

Updated 1 year ago
Checked by Malware Check
wavebrowser.exe

Technical Analysis

File Name wavebrowser.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64, for MS Windows
SSDEEP Hash
49152:y45G+W89dxPLT+741+BANBG7p+jhZPDT+ZQW2Z/pjqq8ldd3:a372DWePD6kqld3
Scanner Version 1.0.171.174
Database Version 2024-04-05 19:00:15 UTC
⚠

Suspicious File Detected

Detected by 1 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
1%
Detection Rate
3,168,168
File Size (bytes)
1/72
Engines Detected
2024-04-05
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
873df1a57b2e042a3c6cfdfbbccaaf06
SHA1
a2b792e004663b45631960a6b4377daa3c572606
SHA256
1778a0212718b6cdeea9b680028816d75cf925e5f13986c8fbff34d95cea9c4d
SHA512
502dd8c1cd2db8e644dcb06902870f83374dbe47ed9da1371a5fe9fe6d85178f1de7969a4d150ce420707a54847a4a2656762c73247e35807b1bcf3a7a7ad7dc
ImpHash
b9dd99c62d1fa7d4c0b3fb0386190fbb

Security Engines with Detections (1 of 72)

Malwarebytes
PUP.Optional.Wave Malicious
71 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: c1a016b05f2ebe359c58b141ad25c2d6
Fuzzy: ba00b1371b6c86696ee1a114ad268077
dHash: 1f197a6672986917
Image Base 0x140000000
Entry Point 0x140170f50
Compilation Time 2023-12-04 00:00:01
Checksum 0x0030c737 (Actual: 0x0030c737)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path wavebrowser.exe.pdb
Digital Signature OK
Imports 4 libraries
wavebrowser_elf, KERNEL32, ntdll, VERSION
Exports 3 functions
Resources 82 Resources
Sections 13 Sections

Version Information

▼
CompanyName Wavesor Software
FileDescription WaveBrowser
FileVersion 1.3.16.1
InternalName wavebrowser_exe
LegalCopyright Copyright 2023 Wavesor Software. All rights reserved.
OriginalFilename wavebrowser.exe
ProductName WaveBrowser
ProductVersion 1.3.16.1
CompanyShortName Wavesor Software
ProductShortName WaveBrowser
LastChange 6d7b721c2d6fdb82cbf06f8609fb8bdf7e7f12db
Official Build 1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,281,838 bytes 2,281,984 bytes 6.52 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 540DC31BD1A399C294792527FE70DCB5
.rdata 0x0022f000 259,388 bytes 259,584 bytes 5.79 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C14BF41542A9F747CDE62888216B0B59
.data 0x0026f000 123,992 bytes 67,584 bytes 1.79 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A11363C7F147A3221BCDBBCAD8C7935F
.pdata 0x0028e000 61,152 bytes 61,440 bytes 6.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FE1CECCAA72C531DC006BC45867A31A4
.00cfg 0x0029d000 48 bytes 512 bytes 0.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2042C15B3D55665E7B11F78B95A80F5A
.gxfg 0x0029e000 12,384 bytes 12,800 bytes 5.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BC7D9B10F686884A8341C668D00F2C34
.retplne 0x002a2000 172 bytes 512 bytes 1.32 (Normal) 0x00000000 5255FC51B70BB72C37739ECD335CECFE
.tls 0x002a3000 577 bytes 1,024 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 21AE29A4D48BC92D28E27F58DC756BAF
CPADinfo 0x002a4000 56 bytes 512 bytes 0.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 60D3EA61D541C9BE2E845D2787FB9574
_RDATA 0x002a5000 348 bytes 512 bytes 3.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 29842BB562531B9961A6FE36AE45853F
malloc_h 0x002a6000 1,429 bytes 1,536 bytes 6.06 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 1F4CEE433EAFEA194204170564FD9BCD
.rsrc 0x002a7000 459,536 bytes 459,776 bytes 5.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6F605B9AE6A289428987F22BD4115BEB
.reloc 0x00318000 9,560 bytes 9,728 bytes 5.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D6E24F1074F9427A13A52DF421A15F88
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 82 (454,993 bytes)
Resource Type Count Total Size Percentage
GOOGLEUPDATEAPPLICATIONCOMMANDS 1 4 bytes
0%
RT_CURSOR 23 56,516 bytes
12.4%
RT_ICON 31 395,357 bytes
86.9%
RT_GROUP_CURSOR 21 448 bytes
0.1%
RT_GROUP_ICON 4 458 bytes
0.1%
RT_VERSION 1 1,088 bytes
0.2%
RT_MANIFEST 1 1,122 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product WaveBrowser
Description WaveBrowser
File Version 1.3.16.1
Original Name wavebrowser.exe
Signing Date 10:41 PM 12/06/2023 (605 days ago)
Verification Status Signed
Signers Wavesor Software (Eightpoint Technologies Ltd. SEZC); DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Sectigo RSA Time Stamping Signer #4; Sectigo RSA Time Stamping CA; Sectigo
Internal Name wavebrowser_exe
Copyright Copyright 2023 Wavesor Software. All rights reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Wavesor Software (Eightpoint Technologies Ltd. SEZC) #2 Chain
Validity Period: 2023-09-14 00:00:00 → 2026-07-20 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 09 D7 7A 45 C1 C0 97 55 AE 3E 7A 51 53 98 3C 03
Sectigo RSA Time Stamping Signer #4 #3 Chain
Validity Period: 2023-05-03 00:00:00 → 2034-08-02 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 39 4C 25 E1 7C A0 6D 27 A8 65 E2 3B D9 1D 22 D4
Sectigo RSA Time Stamping CA #4 Chain
Validity Period: 2019-05-02 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 30 0F 6F AC DD 66 98 74 7C A9 46 36 A7 78 2D B9

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
1 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware