» clip-high_d_06-bg.exe
Overview
Analysis
File Details
Programs (1)

clip-high_d_06-bg.exe

Clip-High_D_06

Krance Development

This adware is a web browser extension that will inject advertising in the browser in the form of unwanted banners and text-links which may link to malware sites and install unwanted software. The application clip-high_d_06-bg.exe, “Clip-High_D_06 exe” by Krance Development has been detected as adware by 13 anti-malware scanners. This file is typically installed with the program Clip-High_D_06 by Kimahri Software inc. which is a potentially unwanted software program. Part of the Corssrider web browser platform, the BG executable is a background process that manage various function of the installed extensions in user's browser including managing installation, updates and remote code downloads. It is distributed as part of the Brightcircle group of browser-extensions.

File name:

Publisher:

BNT_D (signed by Krance Development)

Product:

Clip-High_D_06

Description:

Clip-High_D_06 exe

Version:

1000.1000.1000.1000

MD5:

44ec8cdb6f439b2bcf8063e6d41ec7e7

SHA-1:

f07005250c791bca94b283f7e9fafa80b295cd88

SHA-256:

bad947ea3e23e648eac876139ab0ffc62f977c535240a190c7058d59ac1ed87e

Scanner detections:

13 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements. Distributed through the Brightcircle investments brand.

Note:

Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is Krance Development.

Analysis date:

4/23/2024 2:33:10 PM UTC (today)

Scan engine

Detection

Engine version

AhnLab V3 Security

Win-PUP/CrossRider

2014.10.25

Avira AntiVirus

ADWARE/CrossRider.Gen7

7.11.181.44

AVG

Generic

2015.0.3311

Baidu Antivirus

Adware.Win32.CrossAd

4.0.3.141025

ESET NOD32

Win32/Toolbar.CrossRider.BA (variant)

8.10618

F-Prot

W32/A-ea13b6b6

v6.4.7.1.166

G Data

Win32.Adware.Crossrider

14.10.24

Malwarebytes

PUP.Optional.ClipHD.A

v2014.10.25.07

Reason Heuristics

Adware.Crossrider.Brightcircle

15.3.1.15

Rising Antivirus

PE:Malware.Obscure!1.9C59

23.00.65.141023

Vba32 AntiVirus

AdWare.Adwapper

3.12.26.3

VIPRE Antivirus

Crossrider

34232

Zillya! Antivirus

Adware.Adwapper.Win32.589

2.0.0.1966

File size:

731.4 KB (748,960 bytes)

Product version:

1000.1000.1000.1000

Original file name:

Clip-High_D_06.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\clip-high_d_06\clip-high_d_06-bg.exe

Digital Signature

Signed by:

Krance Development

Authority:

COMODO CA Limited

Valid from:

8/28/2014 2:00:00 AM

Valid to:

8/29/2015 1:59:59 AM

Subject:

CN=Krance Development, O=Krance Development, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

2F8A4746EB05936853BC17805C72D300

File PE Metadata

Compilation timestamp:

10/4/2014 9:36:32 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

6144:7+IMIOAy2/YzM0gq8DDRZ3mwBGqvt3Pjm1G1w7czeGkrbBpzpP6Dn2PCYiT5YmT3:Z0otBf3mwBZ/Darbf5cYmTyvj3RF96

Entry address:

0x6833A

Entry point:

E8, 4D, CB, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 70, F4, 4A, 00, E8, 50, 49, 00, 00, E8, C4, 1C, 00, 00, 0F, B7, F0, 6A, 02, E8, E0, CA, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 20, 4F, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8... 
[+]

Code size:

589.5 KB (603,648 bytes)

The file clip-high_d_06-bg.exe has been discovered within the following program.

Clip-High_D_06 by Kimahri Software inc.

Clip-High is an adware web browser application that displays banner ads as well as contextual link ads that are injected in the web page.

82% remove it

Remove clip-high_d_06-bg.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.