Wave Browser PUP Generic Analysis
| Online Virus Checker | v.1.0.139.174 |
| DB Version: | 2023-09-18 20:03:25 |
PUP.Win32.Generic.bot
This is a generic detection name used to identify a potentially harmful or suspicious file or program that exhibits characteristics of a Trojan horse. It is malware that disguises itself as a legitimate or benign program but contains malicious code or functions.
| File | Wave Browser |
| Checked | 2023-09-18 17:49:31 |
| MD5 | a69d796ab71f88742ebc5317ff46015a |
| SHA1 | e0161537372941371751cfc3defe9041b03251c1 |
| SHA256 | 204259fc2caf158eb9bfae76aa4204dde93a18643f5cbb578d8f93260f11593d |
| SHA512 | c948df9b292b6e4340e1329bdc467fb8ba9d4d8d08256d761efcd451d50c9432dc08ad4fa030f6a65d4abb7ab7ecf266b93421e16e14c655391a13e6c88745d4 |
| Imphash | 3abe302b6d9a1256e6a915429af4ffd2 |
| File Size | 1035224 bytes |
PUP.Win32.Generic.bot Removal
Gridinsoft has the capability to identify and eliminate PUP.Win32.Generic.bot without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Signers
| DigiCert Trusted Root G4 | DigiCert, Inc. (US) |
| DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 | Wavesor Software (Eightpoint Technologies Ltd. SEZC) (KY) |
| Verification | OK |
File Version Information
| CompanyName | Wavesor Software |
| FileDescription | WaveBrowser |
| FileVersion | 1.3.15.3 |
| LegalCopyright | Copyright 2023 Wavesor Software. All rights reserved. |
| OriginalFilename | Wave Browser |
| ProductName | WaveBrowser |
| ProductVersion | 1.3.15.3 |
| Translation | 0x0409 0x04e4 |
Portable Executable Info
 |
c1a016b05f2ebe359c58b141ad25c2d6 ba00b1371b6c86696ee1a114ad268077 1f197a6672986917 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x004031d6 |
| Compilation: | 2023-09-14 19:13:20 |
| Checksum: | 0x001045cc (Actual: 0x001045cc) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive |
| Sign: | OK |
| Sections: | 5 |
| Imports: | KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, |
| Exports: | 0 |
| Resources: | 16 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00005f0d | 0x00006000 | a04138503cbcc902263bedc7fedd6947 | 6.45 |
| .rdata | 0x00007000 | 0x00001250 | 0x00001400 | 4856bbf2a79b612f639ebd55d68c4d02 | 5.00 |
| .data | 0x00009000 | 0x0001a818 | 0x00000400 | 06c5105864978df88e34770eefada5da | 5.13 |
| .ndata | 0x00024000 | 0x00016000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rsrc | 0x0003a000 | 0x0002b8e0 | 0x0002ba00 | 9f08f15b9be7a78f532aa02c85b9945b | 5.62 |
