home

Installer.BrowseforChange.exe

The application Installer.BrowseforChange.exe has been detected as a potentially unwanted program by 6 anti-malware scanners. This file is typically installed with the program Browse For Change which is a potentially unwanted software program. The file has been seen being downloaded from cdn.install.oibundles2.com.
Version:
1.0.0.0

MD5:
7b9ae5e77a5c2918af431ed78aadf3f0

SHA-1:
34b12b652f5842fca9eca637c064108e5eed018b

SHA-256:
aa67f404f6b8ab81d070acd25da1984d525cbf1434d24b7c32cde04ab7fc0ad9

Scanner detections:
6 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 1:34:16 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Adware.MSIL.iBryte
4.0.3.131126

Comodo Security
ApplicUnwnt
17390

ESET NOD32
MSIL/Adware.iBryte (variant)
7.9170

K7 AntiVirus
Adware
13.174.10509

Trend Micro House Call
ADW_IBRYTE
7.2.241

Trend Micro
ADW_IBRYTE
10.465.29

File size:
331 KB (338,944 bytes)

Product version:
1.0.0.0

Original file name:
Installer.BrowseforChange.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\installer.browseforchange.exe

File PE Metadata
Compilation timestamp:
4/20/2012 1:33:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:OsBzMSEeYU6LyCoWoQ0pmn2Ozbbqy+Hm5TPlpZPbDn1ny25Qoa9NQzKi43a:nYSEeYBAWoTmn/bP+G5TPDZP3nl15QoH

Entry address:
0x53E4E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.3724

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
328 KB (335,872 bytes)

The file Installer.BrowseforChange.exe has been discovered within the following program.

Browse For Change  by Browse For Change
Publisher's description - “Our plug-in, or browser extension, makes giving automatic whenever you shop online—even if you forget to visit browseforchange.com. You can find the extension on our Download page.”
www.browseforchange.com
66% remove it
 
Powered by Should I Remove It?

The file Installer.BrowseforChange.exe has been seen being distributed by the following URL.

http://cdn.install.oibundles2.com/Installer.BrowseForChange.exe

Remove Installer.BrowseforChange.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.