home

Wave Corporate Sistemas LTDA

Publisher Information

Wave Corporate Sistemas LTDA is a software publisher located in São Paulo, São Paulo/Pq. São Domingos in Brazil*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
The USERTRUST Network

Valid from:
3/30/2011 9:00:00 PM

Valid to:
3/30/2014 8:59:59 PM

Subject:
CN=Wave Corporate Sistemas LTDA, OU=Register, O=Wave Corporate Sistemas LTDA, STREET="Rua Waltrudes Correa, 297", L=São Paulo, S=São Paulo/Pq. São Domingos, PostalCode=05122-070, C=BR

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00fcd29a2214e069668a4734ccc2cf8add

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Quick Heal
(Suspicious) - DNAScan
50.00%

Avira AntiVirus
TR/Spy.Gen, W32/Ramnit.C
50.00%

Sophos
Sus/VB-BD, Virus 'Mal/VBThief-A'
50.00%

F-Prot
W32/VB-Backdoor-PEK-based!Maxim
50.00%

Bitdefender
Gen:Trojan.Heur.VB.em1@cW173kei, Gen:Trojan.Heur.VB.em1@cCREaFci
33.33%

Emsisoft Anti-Malware
Gen:Trojan.Heur.VB.em1@cW173kei, Gen:Trojan.Heur.VB.em1@cCREaFci
33.33%

F-Secure
Gen:Trojan.Heur.VB.em1@cW173kei, Gen:Trojan.Heur.VB.em1@cCREaFci
33.33%

G Data
Gen:Trojan.Heur.VB.em1@cW173kei, Gen:Trojan.Heur.VB.em1@cCREaFci
33.33%

Comodo Security
UnclassifiedMalware, Heur.Suspicious
33.33%

MicroWorld eScan
Gen:Trojan.Heur.VB.em1@cCREaFci
16.67%

0 / 68
wavespy.exe  (1dd11ebe0e32a22167c98a8d3b4e8e0f)

0 / 68
wsupdate.exe (Atualiza Remote by Wave Company Sofware)  (ae478f958e77180b310c511001448c99)

0 / 68
7205831_stp.exe  (020f9186ecf2d60797cac53ec382a16b)

0 / 68
waveturbo.exe (by Wave Corporate Software)  (6baa676d0c9a1d9358b04a3d031263c8)

0 / 68
wavespy-pro3.exe (by Wave Corporate Software)  (261df59aa3ea5b780bff5b2d743ec6fe)

0 / 68
wavespy-pro.exe (by Wave Corporate Software)  (cc0ff775296357f74631e19181dc8a61)

0 / 68
wavespy.exe  (779afd68e69de53ac9f0edcc1840e6f0)

0 / 68
waveserver-client.exe (by Wave Corporate Software)  (988d78784fa48aaadc9a339ec50316ff)

0 / 68
services_old.exe (Microsoft VM by Microsoft)  (b0a1410a5ee2beac01e6040f5c8c66f8)

0 / 68
lsass.exe (prjVerificaEXE by Wave Corporate Software)  (83636940e79dbaa888d654ba3c7ee214)

0 / 68
services.exe (Microsoft VM by Microsoft)  (c8935a253f94cd43320a665b638287f8)

4 / 68      (Malware)
services.exe (ibn by Microsoft)  (25844a5d99fb1102f5c835dc6f955725)

3 / 68      (inconclusive)
wavenet.exe (by Wave Corporate Software)  (3225bd13ef559a79f08aea0db902ffda)

1 / 68
wavespy.exe  (03ead68a04e418814aa2479bd5daebae)

10 / 68    (Malware)
Ism.exe (Microsoft SDK by Microsoft)  (fd3eb95e3d5547546179fd0d155130b9)

7 / 68      (Malware)
Ism.exe (Microsoft SDK by Microsoft)  (4dbdc7fcf9f6e03b553711b812507b6d)

1 / 68
ro.exe (prjRegistroOnline by Wave Corporate Sistems)  (c37577c7e2f1b525da241c735edd69f8)

Downloads URLs for files signed by Wave Corporate Sistemas LTDA.

1 / 68
http://gsf-cf.softonic.com/65c/598/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3333639&instance=softonic_br&type=PROGRAM&Expires=1454813873&Signature=eAQNLhzyutH4IqxuJo3A-NXGPCfyr70pqb8CycQ2vh5BKxnBo4DLf10WR6QWjas~b3WXMrVSjmwO9BDLnrrZLIyCSUxNTTQwFRjb2Q96baBmrS4uwzOfbXPx~pjR7mnuUzgcGe99oU-PCYaDrM~ZTl64rc-P2mCQGfQ~n3gqqCc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wavespy.exe  (03ead68a04e418814aa2479bd5daebae)

1 / 68
http://gsf-cf.softonic.com/65c/598/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3333639&instance=softonic_br&type=PROGRAM&Expires=1479483297&Signature=fEmCQQyBTaDslUe8lxLAy1FvAJ5aKNE5pde2hTHx1-P34gvszUEmFr8KBcbbNQlPn~JvE~Lg7d6z1T42o6u2wv8F8NtzahL5gyqZVRza~m40oag46aq6WLylQqXIs6v4ES5b5TmGZFCjwo4kh4HdXgXzQB~Nnw0Bgnfaem~j1OY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wavespy.exe  (03ead68a04e418814aa2479bd5daebae)

1 / 68
http://gsf-cf.softonic.com/65c/598/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3333639&instance=softonic_br&type=PROGRAM&Expires=1479787942&Signature=LmLU-OTR68nHZYtOPlSA9nHgtJcm7BAWYv926g~QSQw0J0PeJuwHXC-cijncCO5Y7Diwijvl0BaKW~jzFTnKo0dMcNnNGQhmE-2yMspUB0o56oodKyCB2harDd3ooQiu3fcKTcPG4eQ8A89BklCHGjoDQU4ocCN7mfq4MVZw2gU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wavespy.exe  (03ead68a04e418814aa2479bd5daebae)

3 / 68      (inconclusive)
http://gsf-cf.softonic.com/04d/2c9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3333048&instance=softonic_br&type=PROGRAM&Expires=1440922517&Signature=RkGV5HUEAqDClBStESOfzdKsP9BClL22dVSjQn~ELJRx~AOaupFMGwurLLTA5EaSbjO9QMmZ~jaa398Ar8GY8VFaeIm0h-6RxIIef8mR1zRDcAzLOt05tJTvS3Og2xozwWeTCx6fw6HzrQXXhxEKiyae~7qt5-IRGbzEf3sf2gw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wavenet.exe  (3225bd13ef559a79f08aea0db902ffda)

The following websites host and distribute files published by Wave Corporate Sistemas LTDA.

gsf-cf.softonic.com

The certificates below are also signed by Wave Corporate Sistemas LTDA.

763F08A85E63DDE82B1CCC80817B4EFB  (Jun 24, 2015 to Jun 23, 2016)

5CF9AD4E9073852DEFA5388B9A06D3DD  (May 16, 2014 to May 17, 2015)

3E5EB6C1AF61814663D09161FDAE8291  (Mar 05, 2013 to Mar 30, 2014)

* Note, the details and description above are based on the code signing digital signature issued to Wave Corporate Sistemas LTDA by The USERTRUST Network on March 30, 2011 with the serial number '00fcd29a2214e069668a4734ccc2cf8add'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.