Hello

[MattPat]

I was on spacebattles.com and when I returned to the site. It forced me to do a captcha.

Detailed description: I was on spacebattles.com looking at something. I went to bed passed put. When I went to the site later. It forced me to do the same captcha to get back in. After that Norton caught a malicious download from an extension that was malicious. I also having issues reading the history part. It sometimes deletes the window.

Product & version number:

OS details: Windows 11

What is the error message you are seeing?

If you have any supporting screenshots, please add them:

[bjm]

@MattPat

I was on spacebattles.com looking at something. I went to bed passed put. When I went to the site later. It forced me to do the same captcha to get back in. After that Norton caught a malicious download from an extension that was malicious. I also having issues reading the history part. It sometimes deletes the window.
Product & version number:
OS details: Windows 11

fwiw ~ as test: trying to recreate your report with my ad blocker off

https://forums.spacebattles.com/

Threat name: URL:Blacklist
Threat type: Miscellaneous - This is malicious software that could harm your data, computer, or network.
Status: Aborted
Detected by: Safe Web
Origin
Downloaded from: https://wav-installers.s3.amazonaws.com/Stubs/WaveBrowser_Stub-v1.5.20.5-wpf.exe
Activity

Path | Type | Status
https://wav-installers.s3.amazonaws.com/Stubs/WaveBrowser_Stub-v1.5.20.5-wpf.exe | URL | Blocked

[bjm]

as test: Safe Web disabled

---

Developers: Wavesor Software (Eightpoint Technologies Ltd. SEZC)
Version: 1.5.20.5
Identified: 2/2/25
Few users
Hundreds of users in the Norton Community have used this file.
Very new
This file was released 2 days ago.
Untrusted
There are many indications that this file is untrustworthy.
Downloaded from: https://wav-installers.s3.amazonaws.com/Stubs/WaveBrowser_Stub-v1.5.20.5-wpf.exe

=================================

wav-installers.s3.amazonaws.com
URL Analysed: https://wav-installers.s3.amazonaws.com/Stubs/WaveBrowser_Stub-v1.5.20...
Norton Rating Caution
CURRENT CATEGORY Potentially Unwanted Software
https://safeweb.norton.com/report/show?url=https://wav-installers.s3.amazonaws.com/Stubs/WaveBrowser_Stub-v1.5.20.5-wpf.exe

==========================================

---

Threat name: Win32:Malware-gen
Status: Moved to Quarantine
On PC from: 2/2/25,
Last Used: 2/2/25,
Few users
Hundreds of users in the Norton Community have used this file.
Very new
This file was released 2 days ago.
High
The file risk is high.
Downloaded from: https://wav-installers.s3.amazonaws.com/Stubs/WaveBrowser_Stub-v1.5.20.5-wpf.exe
Path | Type | Status
C:\Users\user\Desktop\WaveBrowser_Stub-v1.5.20.5-wpf.exe | File | Repaired

24.12.9725 (build 24.12.9725.903)

[MattPat]

But how would a false captcha come about?

[bjm]

@MattPat

But how would a false captcha come about?

trying to recreate your report yesterday with my ad blocker off … I did not encounter any captcha. I did not Log In. I do not have an account.

and today…

and fresh download today → WaveBrowser_Stub-v1.5.20.5-wpf.exe

File: WaveBrowser_Stub-v1.5.20.5-wpf.exe
File size: 1.56 MB (1,638,696 bytes)
MD5 checksum: 166D9AEA5E83E3C9EF500D9C30FC4667
SHA256 checksum: 59E1828B3053CF45E3A7E50B81F241980869FBBF9FCF37372E8A762F11DAD4B0
Date/Time: 2/4/2025

10/70 security vendors flagged this file as malicious
59e1828b3053cf45e3a7e50b81f241980869fbbf9fcf37372e8a762f11dad4b0
Wave Browser.exe
Size 1.56 MB
Last Analysis Date a moment ago
https://www.virustotal.com/gui/file/59e…dad4b0

======================================

and today calling WaveBrowser_Stub-v1.5.20.5-wpf.exe in Norton Sandbox

2a7f71d5c41d/2025-02-04T14:30:07.079Z

==================================

and today calling WaveBrowser_Stub-v1.5.20.5-wpf.exe in Sandboxie