» 05ba29c7-3835-4d16-a597-6c5aee9888a1.dll
Overview
Analysis
File Details
Programs (1)

05ba29c7-3835-4d16-a597-6c5aee9888a1.dll

Morgan Enter Mode

This adware is a web browser extension that will inject advertising in the browser in the form of unwanted banners and text-links which may link to malware sites and install unwanted software. The module 05ba29c7-3835-4d16-a597-6c5aee9888a1.dll by Morgan Enter Mode has been detected as adware by 13 anti-malware scanners. This file is typically installed with the program Sense by Object Browser which is a potentially unwanted software program. The library is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.

File name:

Publisher:

Morgan Enter Mode (signed and verified)

MD5:

13c3d69003846d029c69ef48ce59b069

SHA-1:

a6929414996ecb41f9e6e516ff201e1556c788e6

SHA-256:

303c8b7e78a6836aadb436b31741e52f66b35921b6f46a46e5ac749ee9ef4d7e

Scanner detections:

13 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements.

Analysis date:

4/25/2024 9:58:23 PM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

ADWARE/CrossRider.Gen

7.11.182.186

AVG

Morgan

2015.0.3311

Baidu Antivirus

Adware.NSIS.Adwapper

4.0.3.141025

ESET NOD32

Win32/Toolbar.CrossRider.BB (variant)

8.10575

G Data

Win32.Adware.Crossrider

14.10.24

IKARUS anti.virus

not-a-virus:AdWare.Adwapper

t3scan.1.7.8.0

Kaspersky

not-a-virus:AdWare.NSIS.Adwapper

14.0.0.3048

McAfee

Artemis!13C3D6900384

5600.6967

Qihoo 360 Security

HEUR/QVM30.1.Malware.Gen

1.0.0.1015

Reason Heuristics

Threat.Win.Reputation.IMP

14.12.12.0

Vba32 AntiVirus

AdWare.Adwapper

3.12.26.3

VIPRE Antivirus

Threat.4150696

34232

Zillya! Antivirus

Adware.Adwapper.Win32.740

2.0.0.1974

File size:

143.4 KB (146,848 bytes)

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\sense\05ba29c7-3835-4d16-a597-6c5aee9888a1.dll

Digital Signature

Signed by:

Morgan Enter Mode

Authority:

COMODO CA Limited

Valid from:

8/28/2014 5:00:00 AM

Valid to:

8/29/2015 4:59:59 AM

Subject:

CN=Morgan Enter Mode, O=Morgan Enter Mode, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00E247EA066029B70533C15792B60ED4D8

File PE Metadata

Compilation timestamp:

10/14/2014 12:40:42 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

1536:iv4KcYnAv18F6E3CWAUmxbumh+GydjR1zakq0A+mcRSHsWjcddJP6jS77777777c:sJsNFBydFdA+tjdR6j+GeqNL

Entry address:

0x8318

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E7, 3A, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 00, CC, 01, 10, E8, D9, 14, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 4C, F2, 01, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, F0, 80, 01, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

6.1763

Developed / compiled with:

Microsoft Visual C++

Code size:

87 KB (89,088 bytes)

The file 05ba29c7-3835-4d16-a597-6c5aee9888a1.dll has been discovered within the following program.

Sense by Object Browser

Sense is a potentially unwanted web browser extension that will attempt to modify the user's home and search page settings as well as display advertisements in the browser. The software will attach to IE, Chrome and Firefox.

85% remove it

Remove 05ba29c7-3835-4d16-a597-6c5aee9888a1.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.