home

sense-novainstaller.exe

Sense

Object Browser

The application sense-novainstaller.exe has been detected as adware by 40 anti-malware scanners. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is typically installed with the program Sense by Object Browser which is a potentially unwanted software program. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Publisher:
Object Browser

Product:
Sense

Description:
Sense exe

Version:
1000.1000.1000.1000

MD5:
a2ef4bc7262b9ba9978766db8978eccf

SHA-1:
c9789723bb26e5a137a47e4947701b444d6f5ded

SHA-256:
8ddbc3ae4e05aeea0c88f9e3121d9b1ab1290a533b7d274d1a06cbe25829af6e

Scanner detections:
40 / 68

Status:
Adware

Explanation:
The file is infected by a polymorphic file infector virus.

Analysis date:
4/25/2024 6:52:19 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.374109
923

Agnitum Outpost
Win32.Sality.BK
7.1.1

AhnLab V3 Security
PUP/Win32.PlusHD
2014.06.18

Avira AntiVirus
ADWARE/CrossRider.Gen2
7.11.163.86

avast!
Win32:PUP-gen [PUP]
2014.9-140726

AVG
MalSign.Skodna
2015.0.3401

Baidu Antivirus
Adware.Win32.CrossRider
4.0.3.14722

Bitdefender
Gen:Variant.Kazy.374109
1.0.20.1035

Bkav FE
W32.Sality.PE
1.3.0.4959

Comodo Security
ApplicUnwnt
18241

Dr.Web
Trojan.Crossrider.950
9.0.1.0207

Emsisoft Anti-Malware
Gen:Variant.Kazy.374109
8.14.07.26.04

ESET NOD32
Win32/Toolbar.CrossRider.AG potentially unwanted application
7.0.302.0

Fortinet FortiGate
Riskware/Toolbar_CrossRider
7/26/2014

F-Prot
W32/Sality.gen2
v6.4.6.5.141

F-Secure
Gen:Variant.Kazy.374109
11.2014-26-07_7

G Data
Gen:Variant.Kazy.374109
14.7.24

IKARUS anti.virus
AdWare.Adload
t3scan.1.6.1.0

K7 AntiVirus
Virus
13.180.12643

Kaspersky
Virus.Win32.Sality
14.0.0.3502

Malwarebytes
PUP.Optional.Sense.A
v2014.07.22.07

McAfee
Artemis!32D0D5490B6D
5600.7057

Microsoft Security Essentials
Threat.Undefined
1.177.1852.0

MicroWorld eScan
Gen:Variant.Kazy.374109
15.0.0.621

NANO AntiVirus
Riskware.Win32.AdLoad.dbdvli
0.28.0.60253

Norman
Sality.ZHB
11.20140726

nProtect
Virus/W32.Sality.D
14.07.07.01

Panda Antivirus
PUP/PlusHD
14.07.26.04

Qihoo 360 Security
HEUR/Malware.QVM10.Gen
1.0.0.1015

Quick Heal
W32.Sality.U
7.14.14.00

Reason Heuristics
Threat.Win.Reputation.IMP
14.7.26.16

Rising Antivirus
PE:Malware.Obscure!1.9C59
23.00.65.14724

Sophos
Generic PUA LL
4.97

Total Defense
Win32/Sality.AA
37.0.11045

Trend Micro House Call
TROJ_GEN.F47V1224
7.2.207

Trend Micro
PE_SALITY.RL
10.465.26

Vba32 AntiVirus
Virus.Win32.Sality.bakb
3.12.26.3

VIPRE Antivirus
Threat.4789396
31208

ViRobot
Win32.Sality.N
2011.4.7.4223

Zillya! Antivirus
Virus.Sality.Win32.20
2.0.0.1850

File size:
513.5 KB (525,824 bytes)

Product version:
1000.1000.1000.1000

Copyright:
Copyright 2011

Original file name:
Sense.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sense\sense-novainstaller.exe

File PE Metadata
Compilation timestamp:
7/20/2014 11:04:36 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:dqNBDmP/zvhgbN7VIIxLVHNk6CpTOJ8vC:dqi/zJgbN306+TX

Entry address:
0x44823

Entry point:
E8, BE, DD, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47, 8B, 54, 24, 10, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 14, 89, 54, 24, 10, 8B, 44, 24, 1C, 0B, C0, 7D, 14, 47, 8B, 54, 24, 18, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 1C, 89, 54, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 18, 8B, 44, 24, 14, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 10, F7, F1, 8B, D3, EB, 41, 8B, D8, 8B, 4C, 24, 18, 8B, 54, 24, 14, 8B, 44, 24, 10, D1, EB, D1, D9, D1, EA, D1, D8, 0B, DB, 75, F4...
 
[+]

Code size:
403 KB (412,672 bytes)

Scheduled Task
Task name:
9369796a-f726-40de-8e62-324780d67388-6

Trigger:
Logon (Runs on logon)

Action:
sense-novainstaller.exe \wnnihg \doowqk='sense' \iemvt=48292 \oupwx='00080


The file sense-novainstaller.exe has been discovered within the following program.

Sense  by Object Browser
Sense is a potentially unwanted web browser extension that will attempt to modify the user's home and search page settings as well as display advertisements in the browser. The software will attach to IE, Chrome and Firefox.
85% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):
Connects to ip-50-63-202-58.ip.secureserver.net  (50.63.202.58:80)

Remove sense-novainstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.