» sense-bho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

sense-bho.dll

Sense

Sailor Project

This web browser extension uses the Crossrider toolbar creation and distribution platform. The module sense-bho.dll by Sailor Project has been detected as adware by 14 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘CrossriderApp0061915’. This file is typically installed with the program Sense by Object Browser which is a potentially unwanted software program. This is the Browser Helper Object (BHO) for the Crossrider web browser platform for Internet Explorer. Instead of utilizing a traditional IE Toolbar, it installs a BHO in the browser in order to manage the functionality of the addon. It is distributed as part of the Brightcircle group of browser-extensions.

File name:

sense-bho.dll

Publisher:

Object Browser (signed by Sailor Project)

Product:

Sense

Description:

Sense BHO

Version:

1.1.153.8

MD5:

7373fc745f432914bbb1b860220fb51e

SHA-1:

37e8b6db12b3512a1e66b4dfc7edd60275f627a4

SHA-256:

b1a6e80db14bdf20467c184590adeaea0e984e0ccb6d3809116bafa26c6d5f84

Scanner detections:

14 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements. Distributed through the Brightcircle investments brand.

Note:

Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is Sailor Project.

Analysis date:

4/19/2024 3:37:38 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

ADWARE/CrossRider.Gen2

7.11.164.86

avast!

Win32:Adware-gen [Adw]

2014.9-140730

Baidu Antivirus

Adware.Win32.CrossRider

4.0.3.14730

Dr.Web

DLOADER.Trojan

9.0.1.0211

ESET NOD32

Win32/Toolbar.CrossRider.AF potentially unwanted application

7.0.302.0

F-Prot

W32/A-eb9ef301

v6.4.7.1.166

IKARUS anti.virus

not-a-virus:WebToolbar.CroRi

t3scan.1.6.1.0

Kaspersky

not-a-virus:WebToolbar.Win32.CroRi

14.0.0.3485

Malwarebytes

PUP.Optional.Sense.A

v2014.07.30.12

Panda Antivirus

Trj/Genetic.gen

14.07.30.12

Reason Heuristics

PUP.Crossrider.SailorProject.J

14.7.30.0

Rising Antivirus

PE:Malware.Obscure!1.9C59

23.00.65.14728

Sophos

AppRider

4.98

VIPRE Antivirus

Threat.4789396

31208

File size:

583.4 KB (597,352 bytes)

Product version:

1.1.153.8

Original file name:

Sense.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\sense\sense-bho.dll

Digital Signature

Signed by:

Sailor Project

Authority:

COMODO CA Limited

Valid from:

7/18/2014 3:00:00 AM

Valid to:

7/19/2015 2:59:59 AM

Subject:

CN=Sailor Project, O=Sailor Project, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

47C5F145C734CD3D086C0A102176F0A1

Registration

CLSIDs:

{11111111-1111-1111-1111-110611191115}, {22222222-2222-2222-2222-220622192215}

ProgIDs:

CrossriderApp0061915.BHO.1, CrossriderApp0061915.Sandbox.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/29/2014 1:04:36 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:U21hta/II1Zmrd2zPapOHEdAAvaRXcWTIEXWxrJqfyb:pz2ed23rFzT6xrJqfQ

Entry address:

0x44397

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, EA, B4, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, F8, DE, 07, 10, E8, BA, 30, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 18, 49, 08, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 54, E3, 06, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

6.5753

Developed / compiled with:

Microsoft Visual C++

Code size:

399.5 KB (409,088 bytes)

Internet Explorer BHO

Display name:

CrossriderApp0061915

CLSID:

{11111111-1111-1111-1111-110611191115}

CLSID name:

Sense

The file sense-bho.dll has been discovered within the following program.

Sense by Object Browser

Sense is a potentially unwanted web browser extension that will attempt to modify the user's home and search page settings as well as display advertisements in the browser. The software will attach to IE, Chrome and Firefox.

85% remove it

Remove sense-bho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.