Uploaded PUP Generic Analysis
Technical Analysis
| File Name | uploaded |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Scanner Version | 1.0.139.174 |
| Database Version | 2023-09-18 20:03:25 UTC |
PUP.Win32.Generic.bot
Malware family: Generic
This detection name identifies suspicious files displaying Trojan-like behavior patterns. It represents malware that masquerades as benign programs while executing unauthorized activities on the infected system.
N/A
Detection Rate
1,035,224
File Size (bytes)
2023-09-18
Analysis Date
Scan Another File
File Identification
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
a69d796ab71f88742ebc5317ff46015a
|
|
| SHA1 |
e0161537372941371751cfc3defe9041b03251c1
|
|
| SHA256 |
204259fc2caf158eb9bfae76aa4204dde93a18643f5cbb578d8f93260f11593d
|
|
| SHA512 |
c948df9b292b6e4340e1329bdc467fb8ba9d4d8d08256d761efcd451d50c9432dc08ad4fa030f6a65d4abb7ab7ecf266b93421e16e14c655391a13e6c88745d4
|
|
| ImpHash |
3abe302b6d9a1256e6a915429af4ffd2
|
PE Analysis
Basic Information
▼| Icon |
Hash: c1a016b05f2ebe359c58b141ad25c2d6
Fuzzy: ba00b1371b6c86696ee1a114ad268077 dHash: 1f197a6672986917 |
| Image Base | 0x00400000 |
| Entry Point | 0x004031d6 |
| Compilation Time | 2023-09-14 19:13:20 |
| Checksum | 0x001045cc (Actual: 0x001045cc) |
| OS Version | 4.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Digital Signature | OK |
| Imports |
7 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32 |
| Exports | 0 functions |
| Resources | 16 Resources |
| Sections | 5 Sections |
Digital Signatures
▼| DigiCert Trusted Root G4 | DigiCert, Inc. (US) |
| DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 | Wavesor Software (Eightpoint Technologies Ltd. SEZC) (KY) |
Version Information
▼| CompanyName | Wavesor Software |
| FileDescription | WaveBrowser |
| FileVersion | 1.3.15.3 |
| LegalCopyright | Copyright 2023 Wavesor Software. All rights reserved. |
| OriginalFilename | Wave Browser |
| ProductName | WaveBrowser |
| ProductVersion | 1.3.15.3 |
| Translation | 0x0409 0x04e4 |
PE Sections
▼| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
24,333 bytes | 24,576 bytes | 6.45 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
A04138503CBCC902263BEDC7FEDD6947 |
.rdata |
0x00007000 |
4,688 bytes | 5,120 bytes | 5.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
4856BBF2A79B612F639EBD55D68C4D02 |
.data |
0x00009000 |
108,568 bytes | 1,024 bytes | 5.13 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
06C5105864978DF88E34770EEFADA5DA |
.ndata |
0x00024000 |
90,112 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x0003a000 |
178,400 bytes | 178,688 bytes | 5.62 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
9F08F15B9BE7A78F532AA02C85B9945B |
Resource Analysis
▼
Total Resources: 16
(177,472 bytes)
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 10 | 174,539 bytes | |
| RT_DIALOG | 3 | 1,000 bytes | |
| RT_GROUP_ICON | 1 | 146 bytes | |
| RT_VERSION | 1 | 728 bytes | |
| RT_MANIFEST | 1 | 1,059 bytes |
Certificate Chain Analysis
▼Certificate #1
| Subject |
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 DigiCert, Inc. US |
| Issuer | DigiCert Trusted Root G4 |
| Serial Number | 11533403529598586876501374841704918745 |
Certificate #2
| Subject |
Wavesor Software (Eightpoint Technologies Ltd. SEZC) Wavesor Software (Eightpoint Technologies Ltd. SEZC) KY |
| Issuer | DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 |
| Serial Number | 13081875767327525095052709720529320963 |
Certificate Verification Status
OK
PUP.Win32.Generic.bot Removal
Gridinsoft has the capability to identify and eliminate PUP.Win32.Generic.bot without requiring further user intervention.
Download Anti-MalwareRemoval Instructions
Follow these steps to completely remove the threat from your system
-
1
Get Gridinsoft Anti-Malware — it's a quick 2 MB download that won't slow down your PC.
-
2
Run the installer gsam-en-install.exe. The setup takes about 2 minutes and doesn't require a restart.
-
3
The app launches right after installation. You'll see the main dashboard with the scan button front and center.
-
4
Hit "Standard Scan" — this checks all the spots where malware typically hides: temp folders, browser data, startup programs, and system directories.
-
5
Once the scan finds this threat, click "Clean Now". The removal usually happens instantly, though some stubborn infections may need a reboot.
-
6
If you see a restart prompt, go ahead and reboot. This clears any malware that was running in memory and ensures your system starts fresh.
Important: Before You Start
Quick tip: unplug from the internet before scanning. Some malware phones home for instructions or downloads extra payloads when it senses trouble. If the infection is severe, boot into Safe Mode first — it limits what can run and makes cleanup easier.
Leave a Comment
Gridinsoft Anti-Malware
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!
