home

sunrisebrowse.gcupdate.dll

SunriseBrowse

This is the Google Chrome extension manager/updater for the Yontoo SunriseBrowse branded web browser plugin which injects banners, text-link and popup ads in the Chorme browser. The module sunrisebrowse.gcupdate.dll by SunriseBrowse has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
SunriseBrowse  (signed and verified)

Version:
1.0.5612.33529

MD5:
ed2aa745c3b45b5501cf9fc15f89ccee

SHA-1:
9beaf5fd958dca25ff4f81b8490fb7fd45e40b9b

SHA-256:
cdc1c103d513b3607fab692b19915cb7d2b4a86511837662ac41cd637bf3f669

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Part of the Yontoo distributed ad-supported web browser extension for Chrome.

Analysis date:
5/26/2024 7:36:23 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Yontoo (M)
17.3.15.23

File size:
1.5 MB (1,597,688 bytes)

Product version:
1.0.5612.33529

Original file name:
2015051502.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\sunrisebrowse\bin\plugins\sunrisebrowse.gcupdate.dll

Digital Signature
Signed by:
SunriseBrowse

Authority:
VeriSign, Inc.

Valid from:
8/5/2014 2:00:00 AM

Valid to:
8/6/2015 1:59:59 AM

Subject:
CN=SunriseBrowse, O=SunriseBrowse, L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0EB7B556E015257902A5C4786A7BEA23

File PE Metadata
Compilation timestamp:
5/15/2015 4:37:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

Entry address:
0x185FFA

Entry point:
FF, 25, 00, 20, 40, 00, 00, 50, 18, 00, 0C, 00, 00, 00, FC, 3F, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.3051

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.5 MB (1,589,248 bytes)

Remove sunrisebrowse.gcupdate.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.