browsestudio.dll

BrowseStudio

Part of the Yontoo adware component, a web browser plugin that injects unwanted ads in the browser. The module browsestudio.dll by BrowseStudio has been detected as adware by 30 anti-malware scanners. Additionally, the file is typically installed by a number of programs including BrowseStudio by Yontoo Technology, Inc. and Buzzdock by Alactro LLC, both potentially unwanted software. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.
Publisher:
BrowseStudio  (signed and verified)

Product:
BrowseStudio

Version:
1.0.0.3

MD5:
283d4780816189bf05444f75293ebf67

SHA-1:
1db289aa60be1d3f4d7e9dc3ffa75d9037c4e3a5

SHA-256:
8c02939d38892657695881aa0bf9306d3da6461a631b85c98aca561559a51b68

Scanner detections:
30 / 68

Status:
Adware

Explanation:
Injects advertising in the web browser in various formats.

Analysis date:
11/24/2024 10:52:51 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.BHO.Agent.4
806

Agnitum Outpost
PUA.Agent
7.1.1

Avira AntiVirus
APPL/BrowseFox.Gen2
7.11.166.4

AVG
Adware BrowseFox.F
2014.0.4189

Baidu Antivirus
Adware.Win32.BrowseFox
4.0.3.141121

Bitdefender
Gen:Variant.Adware.BHO.Agent.4
1.0.20.1625

Clam AntiVirus
Win.Adware.Agent-7675
0.98/21411

Comodo Security
Application.Win32.Altbrowse.AK
19119

Dr.Web
Trojan.BPlug.167
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Adware.BHO.Agent
8.14.11.21.02

ESET NOD32
Win32/BrowseFox.O potentially unwanted application
7.0.302.0

Fortinet FortiGate
Adware/Agent
11/21/2014

F-Prot
W32/BadBHO.AW.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.BHO.Agent.4
11.2014-21-11_6

G Data
Gen:Variant.Adware.BHO.Agent
14.11.24

K7 AntiVirus
Unwanted-Program
13.185.14085

Kaspersky
not-a-virus:AdWare.Win32.Agent
14.0.0.2915

Malwarebytes
PUP.Optional.Zebar.A
v2014.11.21.02

McAfee
Artemis!CD96DF17AA75
5600.6940

MicroWorld eScan
Gen:Variant.Adware.BHO.Agent.4
15.0.0.975

NANO AntiVirus
Riskware.Win32.Agent.czmzab
0.28.2.61349

nProtect
Trojan-Clicker/W32.Agent.249624.B
14.08.07.01

Panda Antivirus
Trj/CI.A
14.11.21.02

Qihoo 360 Security
HEUR/Malware.QVM30.Gen
1.0.0.1015

Reason Heuristics
PUP.BrowseStudio.M
14.11.21.23

Sophos
BrowseSmart
4.98

SUPERAntiSpyware
Adware.BrowseFox/Variant
10225

Trend Micro House Call
Suspicious_GEN.F47V0807
7.2.325

VIPRE Antivirus
Yontoo
32026

Zillya! Antivirus
Adware.Agent.Win32.9402
2.0.0.1850

File size:
244.7 KB (250,608 bytes)

Product version:
1.0.0.3

Copyright:
(c) BrowseStudio. All rights reserved.

Original file name:
BrowseStudioIEClient.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\content.ie5\2woj7dg6\browsestudio.dll

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
9/1/2014 5:00:00 PM

Valid to:
9/2/2015 4:59:59 PM

Subject:
CN=BrowseStudio, O=BrowseStudio, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
11AE532A33120159E1078A0D3EDE88C9

File PE Metadata
Compilation timestamp:
11/20/2014 8:37:42 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:pn6oqa7ZcJ83Z2qJC0SzN+3aR4id15+s+xIaI4Y9RlLZ:pOa7Zce3BCR/wxIrTlLZ

Entry address:
0x12854

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 41, 8D, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 90, 30, 03, 10, E8, BD, 01, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 44, 78, 03, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 1C, A5, 02, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Entropy:
6.3536

Developed / compiled with:
Microsoft Visual C++

Code size:
159 KB (162,816 bytes)

The file browsestudio.dll has been discovered within the following programs.

BrowseStudio  by Yontoo Technology, Inc.
BrowseStudio is an adware program (supported by various types of advertising) that is usually bundled by third party installers and download managers.
browsestudio.com/support
81% remove it
Buzzdock  by Alactro LLC
This is a web browser extension that injects advertising. From the EULA: "Buzzdock is free to download and use. Buzzdock is supported by advertising, and users will see additional ads on websites where Buzzdock features operate.
www.buzzdock.com/faq-support
79% remove it
 
Powered by Should I Remove It?

The file browsestudio.dll has been seen being distributed by the following URL.

Remove browsestudio.dll - Powered by Reason Core Security