» e9b33bfc-b8f2-47e0-8fda-88bdde379f32-64.exe
Overview
Analysis
File Details
Programs (1)

e9b33bfc-b8f2-47e0-8fda-88bdde379f32-64.exe

Sense

Sailor Project

This potentially unwanted Internet browser extension is built upon and distributed using the free Crossrider platform and will deliver advertisements to the web browser in various formats such as banner, text hyper-links, inline text and transitional ads. The application e9b33bfc-b8f2-47e0-8fda-88bdde379f32-64.exe by Sailor Project has been detected as adware by 16 anti-malware scanners. This file is typically installed with the program Sense by Object Browser which is a potentially unwanted software program. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.

File name:

Publisher:

Object Browser (signed by Sailor Project)

Product:

Sense

Description:

Sense exe

Version:

1000.1000.1000.1000

MD5:

e5cc535ebe0df4f5e5ff6448246a56fe

SHA-1:

82a76a919d466ec36c1675b5b808b9b7ad44ffbc

SHA-256:

e8134fe933568f0bfa3ae8c6f8c36465088cc55de5e9c2f43d9b78a8eaccb22b

Scanner detections:

16 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements.

Analysis date:

4/24/2024 8:18:00 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

ADWARE/CrossRider.Gen2

7.11.174.78

avast!

Win32:Crossrider-N [PUP]

2014.9-140813

AVG

Generic

2015.0.3384

Baidu Antivirus

Adware.Win32.GoogUpdate

4.0.3.14813

Clam AntiVirus

Win.Trojan.Googupdate-2

0.98/19424

Dr.Web

Trojan.Crossrider.28708

9.0.1.0296

ESET NOD32

Win64/Toolbar.Crossrider.I potentially unwanted application

8.7.0.302.0

herdProtect (fuzzy)

variant of 69efcec7-d631-4282-9507-399ab4f32f1d-64.exe (Adware)

2014.10.24.1

IKARUS anti.virus

Trojan.GoogUpdate

t3scan.1.7.8.0

Kaspersky

Trojan.NSIS.GoogUpdate

14.0.0.3415

Malwarebytes

PUP.Optional.MediaPlayer.A

v2014.08.13.02

Panda Antivirus

Trj/Chgt.F

14.10.23.10

Qihoo 360 Security

Win32/Trojan.3b1

1.0.0.1015

Reason Heuristics

PUP.SailorProject.h

14.8.13.2

VIPRE Antivirus

Threat.4789396

32938

Zillya! Antivirus

Trojan.GoogUpdate.Win64.9

2.0.0.1930

File size:

689.4 KB (705,896 bytes)

Product version:

1000.1000.1000.1000

Original file name:

Sense.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\sense\e9b33bfc-b8f2-47e0-8fda-88bdde379f32-64.exe

Digital Signature

Signed by:

Sailor Project

Authority:

COMODO CA Limited

Valid from:

7/18/2014 2:00:00 AM

Valid to:

7/19/2015 1:59:59 AM

Subject:

CN=Sailor Project, O=Sailor Project, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

47C5F145C734CD3D086C0A102176F0A1

File PE Metadata

Compilation timestamp:

8/7/2014 12:12:20 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:Ouy2dSe4WVZ9d33ofqZrZTmDnVdzGFS/9g:Oxde4W/9B3oy3TAnVdiE9g

Entry address:

0x4F650

Entry point:

48, 83, EC, 28, E8, FF, D7, 00, 00, 48, 83, C4, 28, E9, 02, 00, 00, 00, CC, CC, 48, 89, 5C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 30, E8, 28, 33, 00, 00, 0F, B7, F0, B9, 02, 00, 00, 00, E8, 8B, D7, 00, 00, B8, 4D, 5A, 00, 00, 48, 8D, 3D, 6F, 09, FB, FF, 66, 39, 05, 68, 09, FB, FF, 74, 04, 33, DB, EB, 31, 48, 63, 05, 97, 09, FB, FF, 48, 03, C7, 81, 38, 50, 45, 00, 00, 75, EA, B9, 0B, 02, 00, 00, 66, 39, 48, 18, 75, DF, 33, DB, 83, B8, 84, 00, 00, 00, 0E, 76, 09, 39, 98, F8, 00, 00, 00, 0F, 95, C3, 89... 
[+]

Code size:

460 KB (471,040 bytes)

The file e9b33bfc-b8f2-47e0-8fda-88bdde379f32-64.exe has been discovered within the following program.

Sense by Object Browser

Sense is a potentially unwanted web browser extension that will attempt to modify the user's home and search page settings as well as display advertisements in the browser. The software will attach to IE, Chrome and Firefox.

85% remove it

Remove e9b33bfc-b8f2-47e0-8fda-88bdde379f32-64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.