home

Installer.BrowseforChange.exe

The application Installer.BrowseforChange.exe has been detected as a potentially unwanted program by 5 anti-malware scanners. This file is typically installed with the program Browse For Change which is a potentially unwanted software program. The file has been seen being downloaded from cdn.install.oibundles2.com.
Version:
1.1.0.0

MD5:
b5411fad38e739de80205f64084b1e90

SHA-1:
a8fe8f7e824062af583b9c6309f35570d85e3afc

SHA-256:
d7c25f652930c2a36f0d907f98a0ef4f2fbe64ccb5b49d75a8865090a710fd98

Scanner detections:
5 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 11:20:59 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
AdWare.Win32.iBryte
4.0.3.131126

ESET NOD32
MSIL/Adware.iBryte (variant)
7.9091

K7 AntiVirus
Riskware
13.170.9377

Rising Antivirus
Trojan.Win32.Generic.145548C3
23.00.65.131124

Trend Micro House Call
TROJ_GEN.R0CCH01H413
7.2.240

File size:
322 KB (329,728 bytes)

Product version:
1.1.0.0

Original file name:
Installer.BrowseforChange.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\installer.browseforchange.exe

File PE Metadata
Compilation timestamp:
3/22/2013 1:55:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:b3QWeo/CPmJ67ULb0JboEmoPYU5O99rUDjlI13+zYofdSePTyEnfEbF3y+z2aO0:bAE/gAfyboQPY+JDR7Yo8YuEnMbJFzN

Entry address:
0x51B3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.3667

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
319 KB (326,656 bytes)

The file Installer.BrowseforChange.exe has been discovered within the following program.

Browse For Change  by Browse For Change
Publisher's description - “Our plug-in, or browser extension, makes giving automatic whenever you shop online—even if you forget to visit browseforchange.com. You can find the extension on our Download page.”
www.browseforchange.com
66% remove it
 
Powered by Should I Remove It?

The file Installer.BrowseforChange.exe has been seen being distributed by the following URL.

http://cdn.install.oibundles2.com/bundles/.../Installer.BrowseForChange.exe

Remove Installer.BrowseforChange.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.