WebCompanion.exe

WebCompanion

Lavasoft Software Canada

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Web Companion’. This file is installed with the program Web Companion.
Publisher:
Lavasoft  (signed by Lavasoft Software Canada)

Product:
WebCompanion

Description:
Web Companion

Version:
2.3.1479.2868

MD5:
9cb7353cb12a722bf6d627cc6a3bd317

SHA-1:
7f3dc22f5ed3db3aba5bf1ec75bc39599abce9c1

SHA-256:
a2913d01f78d16b4fc7e4b0ae4e852ec6a993adfffcbb1fa576aa88e18a80ce9

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 2:55:32 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM03.0.0000.Malware.Gen
1.0.0.1120

File size:
1.7 MB (1,795,736 bytes)

Product version:
2.3.1479.2868

Copyright:
Copyright © 2013

Trademarks:
(R) Lavasoft

Original file name:
WebCompanion.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\lavasoft\web companion\application\webcompanion.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
7/20/2016 3:12:37 PM

Valid to:
7/21/2018 3:12:37 PM

Subject:
E=itcontracts@lavasoft.com, CN=Lavasoft Software Canada, O=Lavasoft Software Canada, L=Saint-Laurent, S=Quebec, C=CA

Issuer:
CN=GlobalSign CodeSigning CA - G3, O=GlobalSign nv-sa, C=BE

Serial number:
6DE41F889CF84643F324B3D5

File PE Metadata
Compilation timestamp:
10/14/2016 1:08:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:k+98QOxTSUWaEuZXCJSRpT9izVl4JRFpBrQbhlM7fz5O1P3OF2:/8QOIaEvmT9YwBrQa

Entry address:
0x1AE397

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00...
 
[+]

Entropy:
6.7471

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.7 MB (1,754,112 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Web Companion

Command:
C:\Program Files\lavasoft\web companion\application\webcompanion.exe --minimize


The file WebCompanion.exe has been discovered within the following program.

Web Companion  by Lavasoft
Publisher's description - “Web Companion secures your browser’s settings against unauthorized changes and acts as a buffer between your browser and malicious sites.”
www.Lavasoft.com
19% remove it
 
Powered by Should I Remove It?

Scan WebCompanion.exe - Powered by Reason Core Security