» omg music plus-bho64.dll
Overview
Analysis
File Details
Programs (1)

omg music plus-bho64.dll

OMG Music Plus

Bundlore LTD

This is a component of the Bundlore download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The module omg music plus-bho64.dll, “OMG Music Plus BHO” has been detected as adware by 13 anti-malware scanners. This file is typically installed with the program OMG Music Plus by Bundlore LTD which is a potentially unwanted software program. This is the 64-bit version of the Browser Helper Object (BHO) for the Crossrider web browser platform for Internet Explorer. Instead of utilizing a traditional IE Toolbar, Crossrider installs a BHO in the browser in order to manage the functionality of Bundlore LTD addon.

File name:

Publisher:

Bundlore LTD

Product:

OMG Music Plus

Description:

OMG Music Plus BHO

Version:

1000.1000.1000.1000

MD5:

acb2816a2cd9550d7b4569a7dd7d3e7b

SHA-1:

973c3ef7e3235c5de00a1d7c2cc93ec23e480c78

SHA-256:

20460119de2b07ab4721a14ce553e6e6a713a638f0a85621e275103cfc367cd3

Scanner detections:

13 / 68

Status:

Adware

Explanation:

Part of the Crossrider toolbar platform. It will run as a BHO in Internet Explorer.

Note:

Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application.

Analysis date:

5/12/2024 12:49:51 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

PUA.Toolbar.Crossrider

7.1.1

AhnLab V3 Security

PUP/Win32.CrossRider

2015.10.23

Avira AntiVirus

ADWARE/CrossRider.Gen2

8.3.2.2

avast!

Win64:Malware-gen

2014.9-151024

AVG

Crossrider

2016.0.2946

Baidu Antivirus

Adware.Win64.CrossAd

4.0.3.151024

Comodo Security

ApplicUnwnt

23460

ESET NOD32

Win64/Toolbar.Crossrider.C potentially unwanted (variant)

9.12453

G Data

Win64.Adware.Crossrider

15.10.25

Malwarebytes

PUP.Optional.OMG

v2015.10.24.06

Reason Heuristics

Adware.Crossrider.Bundlore (M)

15.10.24.18

Sophos

AppRider (PUA)

4.98

VIPRE Antivirus

Crossrider

44758

File size:

927 KB (949,248 bytes)

Product version:

1000.1000.1000.1000

Original file name:

OMG Music Plus.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\omg music plus\omg music plus-bho64.dll

Registration

CLSIDs:

{11111111-1111-1111-1111-110411911182}, {22222222-2222-2222-2222-220422912282}

ProgIDs:

CrossriderApp0049182.BHO.1, CrossriderApp0049182.Sandbox.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

2/4/2014 5:16:13 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:zRHcCOTo0swkPETYBKubKT2OWzGYPTfs2lTmMvUQfoq:zRBLmYU9SjKeTTfvz

Entry address:

0x75CAC

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 6F, D3, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 20, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 56, 57, 41, 56, 48, 83, EC, 50, 49, 8B, F0, 8B, DA, 4C, 8B, F1, BA, 01, 00, 00, 00, 89, 50, B8, 85, DB, 75, 0F, 39, 1D, 70, A3, 06, 00, 75, 07, 33, C0, E9, D2, 00, 00, 00, 8D, 43, FF... 
[+]

Entropy:

6.1495

Code size:

617.5 KB (632,320 bytes)

The file omg music plus-bho64.dll has been discovered within the following program.

OMG Music Plus by Bundlore LTD

OMG Music (OMG Ltd.) is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings.

www.onlinemusicgroove.com

86% remove it

Remove omg music plus-bho64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.