» sense-buttonutil64.exe
Overview
Analysis
File Details
Programs (1)

sense-buttonutil64.exe

Sense

Naruto Source

This adware is a web browser extension that will inject advertising in the browser in the form of unwanted banners and text-links which may link to malware sites and install unwanted software. The application sense-buttonutil64.exe by Naruto Source has been detected as adware by 19 anti-malware scanners. This file is typically installed with the program Sense by Object Browser which is a potentially unwanted software program. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.

File name:

Publisher:

Object Browser (signed by Naruto Source)

Product:

Sense

Description:

Sense exe

Version:

1000.1000.1000.1000

MD5:

73cd2aa1f94a3cac90f4143de2c76d44

SHA-1:

fb957fdda1d245d762300bfa96a9c7e3403c82f4

SHA-256:

d94a57bec1b3d7ab5257ddb192e9eb3eea70a531565c5574c4b4d2e3db80cc89

Scanner detections:

19 / 68

Status:

Adware

Explanation:

Part of the Crossrider toolbar platform. It will download and install new code and Javascript updates for the extension.

Note:

Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is Naruto Source.

Analysis date:

4/19/2024 11:59:15 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

AhnLab V3 Security

PUP/Win32.CrossRider

2014.08.21

Avira AntiVirus

ADWARE/CrossRider.Gen2

7.11.170.228

avast!

Win64:Adware-gen [Adw]

2014.9-141001

AVG

Generic

2015.0.3375

Baidu Antivirus

PUA.Win64.Crossrider

4.0.3.14101

Comodo Security

ApplicUnwnt

19197

Dr.Web

Adware.Siggen.31030

9.0.1.0274

ESET NOD32

Win64/Toolbar.Crossrider (variant)

8.10287

Fortinet FortiGate

Adware/CrossRider

10/1/2014

G Data

Win64.Trojan.Agent.Q71H0D

14.10.24

IKARUS anti.virus

AdWare.Adload

t3scan.1.7.5.0

Kaspersky

not-a-virus:AdWare.NSIS.Adwapper

14.0.0.3371

Malwarebytes

PUP.Optional.Sense.A

v2014.08.21.08

McAfee

Trojan.Artemis!49C652B3C7EB

5600.6991

Panda Antivirus

Trj/Chgt.D

14.08.21.08

Qihoo 360 Security

Win32/Trojan.Adware.37e

1.0.0.1015

Reason Heuristics

PUP.Crossrider.NarutoSource.S

14.8.21.20

Trend Micro House Call

Suspicious_GEN.F47V0822

7.2.274

VIPRE Antivirus

Crossrider

32396

File size:

379.9 KB (388,968 bytes)

Product version:

1000.1000.1000.1000

Original file name:

Sense.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\sense\sense-buttonutil64.exe

Digital Signature

Signed by:

Naruto Source

Authority:

COMODO CA Limited

Valid from:

7/28/2014 12:00:00 AM

Valid to:

7/28/2015 11:59:59 PM

Subject:

CN=Naruto Source, O=Naruto Source, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

1CE82906A7F364268F66771839675655

File PE Metadata

Compilation timestamp:

8/17/2014 10:02:45 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

6144:bGtwm2qh5/OBwEa+s5lMiRQQqYxdeT1lmetGsi0v/619OGH:bApd/RdLRPxC9Gsp/EH

Entry address:

0x23A08

Entry point:

48, 83, EC, 28, E8, B7, A7, 00, 00, 48, 83, C4, 28, E9, 02, 00, 00, 00, CC, CC, 48, 89, 5C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 30, E8, 90, 20, 00, 00, 0F, B7, F0, B9, 02, 00, 00, 00, E8, 43, A7, 00, 00, B8, 4D, 5A, 00, 00, 48, 8D, 3D, B7, C5, FD, FF, 66, 39, 05, B0, C5, FD, FF, 74, 04, 33, DB, EB, 31, 48, 63, 05, DF, C5, FD, FF, 48, 03, C7, 81, 38, 50, 45, 00, 00, 75, EA, B9, 0B, 02, 00, 00, 66, 39, 48, 18, 75, DF, 33, DB, 83, B8, 84, 00, 00, 00, 0E, 76, 09, 39, 98, F8, 00, 00, 00, 0F, 95, C3, 89... 
[+]

Code size:

242 KB (247,808 bytes)

The file sense-buttonutil64.exe has been discovered within the following program.

Sense by Object Browser

Sense is a potentially unwanted web browser extension that will attempt to modify the user's home and search page settings as well as display advertisements in the browser. The software will attach to IE, Chrome and Firefox.

85% remove it

Remove sense-buttonutil64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.