Gridinsoft Logo

The Waves Ultimate 2024.3 patch.exe (Waves Ultimate) File Analysis

Technical Analysis

File Name Waves Ultimate 2024.3 patch.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
98304:R74pSj4DY7l6/9/P2qcUwMub66+Z+CDpHJ8m+:R7EMsYm9/P2BiZ5LO
Scanner Version 1.0.217.174
Database Version 2025-05-24 04:00:29 UTC

Suspicious File Detected

Detected by 3 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
4%
Detection Rate
4,327,550
File Size (bytes)
3/72
Engines Detected
2025-05-24
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
be488df1040b28bfab1b965a91dd266c
SHA1
0f5eda220f08ba23ac4d247b89e493e07cfdebde
SHA256
dc10069f167acf9a3be7ac997c4953e23c435ea24806de78d3a650516719f704
SHA512
57a7e4bb71cdce1b579c7ac9b3a8f1c7dda368c8d360f6e999671603dae667e6a2f36269976872e78009afb18324f09403fb836e3b76005b83dc0e5abcd4d9ee
ImpHash
81c4f9c10681505b3ad72214da9691de

Security Engines with Detections (3 of 72)

Bkav
W32.AIDetectMalware Malicious
Trapmine
suspicious.low.ml.score Malicious
Microsoft
HackTool:Win32/Patcher Malicious
69 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Image Base 0x00400000
Entry Point 0x004c0018
Compilation Time 2023-04-05 05:17:07
Checksum 0x000e160d (Actual: 0x0042ebd4)
OS Version 6.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 7 libraries
kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
Exports 3 functions
Resources 31 Resources
Sections 10 Sections

Version Information

Comments This installation was built with Inno Setup.
CompanyName Waves Audio
FileDescription Waves Ultimate
FileVersion 2024.3
LegalCopyright © Waves Audio Ltd.
OriginalFileName
ProductName Waves Ultimate
ProductVersion 2024.3
Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 775,632 bytes 775,680 bytes 6.37 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 55A6C65AFC6B2CCF8C8EAE531A9681EE
.itext 0x000bf000 6,076 bytes 6,144 bytes 6.17 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 996C8B0F8BF1B7D0AF896C292A63AB06
.data 0x000c1000 16,220 bytes 16,384 bytes 4.64 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 226D9A87787C014046B4DBC0B4857462
.bss 0x000c5000 38,052 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x000cf000 4,148 bytes 4,608 bytes 4.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 3677CAE2A6E638DFA1D4058CEB81C8C4
.didata 0x000d1000 420 bytes 512 bytes 2.76 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7F510D242A7D06625E9237F85E0C2012
.edata 0x000d2000 154 bytes 512 bytes 1.88 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DC1B6C5C61F64FAE178CA474DE95CC95
.tls 0x000d3000 24 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x000d4000 93 bytes 512 bytes 1.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5B75A462F7F0F49C8A970097CADDD6D6
.rsrc 0x000d5000 127,384 bytes 127,488 bytes 3.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 654A92F0256F09D5A069C8D139E43D97

Resource Analysis

Total Resources: 31 (125,675 bytes)
Resource Type Count Total Size Percentage
RT_ICON 15 113,829 bytes
90.6%
RT_STRING 11 8,212 bytes
6.5%
RT_RCDATA 2 46 bytes
0%
RT_GROUP_ICON 1 216 bytes
0.2%
RT_VERSION 1 1,412 bytes
1.1%
RT_MANIFEST 1 1,960 bytes
1.6%

Certificate Chain Analysis

Certificate Information
Product Waves Ultimate
Description Waves Ultimate
File Version 2024.3
Copyright © Waves Audio Ltd.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
3 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware