MegaBrowseBrowserFilter.exe

Mega Browse

Installed as part of the Yontoo Mega Browse branded web browser extension, the BrowserFilter component is responsible for injecting advertising in the browser based on the context of the HTML being rendered. Ads are injected in the browser in the form of inline text, coupons, multi-site searching and additional offers. The application MegaBrowseBrowserFilter.exe by Mega Browse has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. Additionally, the file is typically installed by a number of programs including Mega Browse by Yontoo Technology, Inc. and Buzzdock by Alactro LLC, both potentially unwanted software.
Publisher:
Mega Browse  (signed and verified)

Version:
0.0.0.0

MD5:
324b9f439d0ecfa4b19d02cc54862312

SHA-1:
330bc94e2e9d1cae78ebe6d481dcb2c1088dd2be

SHA-256:
b70860aa82bed858e98234a8dec4af8b4201df24ca416e0f49f01cd10f476ded

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Part of the Yontoo ad injection web browser add-on.

Analysis date:
4/25/2024 8:31:18 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Yontoo.MegaBrowse (M)
16.1.17.2

File size:
41.3 KB (42,272 bytes)

Product version:
0.0.0.0

Original file name:
MegaBrowseBrowserFilter.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mega browse\megabrowsebrowserfilter.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
1/21/2014 6:00:00 PM

Valid to:
1/22/2015 5:59:59 PM

Subject:
CN=Mega Browse, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mega Browse, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
151F3F44EFA5ADB264205FBF9F779B3D

File PE Metadata
Compilation timestamp:
3/26/2014 10:05:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:1tmgPbT5/WN6ijC3HMci8UAfXTaR3gx3PMXq97pxzo7UAVORDMIfvcJDVqL/myvF:6VjCXFl1jIWU6VpppmORniDVYN/A0Zb

Entry address:
0xA006

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0347

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
32.5 KB (33,280 bytes)

The file MegaBrowseBrowserFilter.exe has been discovered within the following programs.

Buzzdock  by Alactro LLC
This is a web browser extension that injects advertising. From the EULA: "Buzzdock is free to download and use. Buzzdock is supported by advertising, and users will see additional ads on websites where Buzzdock features operate.
www.buzzdock.com/faq-support
79% remove it
Mega Browse  by Yontoo Technology, Inc.
This adware program injects advertisements with its affiliate ad providers in order to serve a number of ad types including banner, inline text links and popups.
megabrowse.biz/support
82% remove it
 
Powered by Should I Remove It?

Remove MegaBrowseBrowserFilter.exe - Powered by Reason Core Security