updatemegabrowse.exe

Mega Browse

Part of the Yontoo web browser plugin (delivers advertisements to the web browser in the form of injected banners, text-links, popups, etc.) the updater mechanism for Mega Browse will automatically keep the extension patched by downloaded new functionality which is auto-enabled by default. The application updatemegabrowse.exe by Mega Browse has been detected as adware by 2 anti-malware scanners. It runs as a separate (within the context of its own process) windows Service named “Update Mega Browse”. This file is typically installed with the program Mega Browse by Yontoo Technology, Inc. which is a potentially unwanted software program. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.
Publisher:
Mega Browse  (signed and verified)

Version:
1.0.5168.42153

MD5:
8206a5d0fe5fb2ae3ca04e129b8c146f

SHA-1:
eea22ff5420360ab3f4b7b4054ae6e0d092e8ddc

SHA-256:
bc3405306703558f0b12160f70e78687f40cee4e15dcd32293ec7e9f5042adfd

Scanner detections:
2 / 68

Status:
Adware

Explanation:
Part of the Yontoo adware web browser extension update process.

Analysis date:
4/27/2024 3:42:33 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/BrowseFox (variant)
8.9511

Reason Heuristics
PUP.Service.MegaBrowse.Q
14.3.19.0

File size:
109.3 KB (111,904 bytes)

Product version:
1.0.5168.42153

Original file name:
MegaBrowse.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\mega browse\updatemegabrowse.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
1/22/2014 1:00:00 AM

Valid to:
1/23/2015 12:59:59 AM

Subject:
CN=Mega Browse, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mega Browse, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
151F3F44EFA5ADB264205FBF9F779B3D

File PE Metadata
Compilation timestamp:
2/25/2014 12:25:28 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:UPRoX3lbv1lJ49/Nz+qMF9t7PYRslx50eYlUXixp8mc9xQ+bCnnqL8JBY:UPab345NaT9t0RWcs68mc9xBbsqL8PY

Entry address:
0x1B14A

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
100.5 KB (102,912 bytes)

Service
Display name:
Update Mega Browse

Type:
Win32OwnProcess


The file updatemegabrowse.exe has been discovered within the following programs.

Mega Browse  by Yontoo Technology, Inc.
This adware program injects advertisements with its affiliate ad providers in order to serve a number of ad types including banner, inline text links and popups.
megabrowse.biz/support
82% remove it
 
Powered by Should I Remove It?

Remove updatemegabrowse.exe - Powered by Reason Core Security