What is “Application.Bundler.Outbrowse.14”?

The Application.Bundler.Outbrowse.14 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Bundler.Outbrowse.14 virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Touches a file containing cookies, possibly for information gathering

How to determine Application.Bundler.Outbrowse.14?


File Info:
name: FA97BF8C13B71E7990D3.mlw
path: /opt/CAPEv2/storage/binaries/c872b576992cf34cd7c07fe2377117101fb548ea095e6bcb2940f636c5105590
crc32: B1535075
md5: fa97bf8c13b71e7990d3a2e5459f6b5a
sha1: 75e3cd60d103b991a670514dda2be9b461c381fe
sha256: c872b576992cf34cd7c07fe2377117101fb548ea095e6bcb2940f636c5105590
sha512: e63a164ed03b285758a496575e4861f40ab3e5225da19027b2556cc638c15c33fb9ed0d8255842d258a9d3e88eb332b18e85299ae4d89855e882a2125ae59976
ssdeep: 12288:HbBN61x9nH5GQSm2BeLpv7gPJRSIoyMiYza:6v7gqIoyMxza
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T18E849C00F785C032E5EE02356539AB19457EBA718BE6C5C7FBE80B0E2A312D25B36757
sha3_384: 0e8e6138b331a0c89d386e7e87f0c3e1d5e5d93ace57f7a1ff22bf3e9ce8719306827568d05b386352a6693331686cf5
ep_bytes: 558bec837d0c017505e8ec870000ff75
timestamp: 2015-04-23 09:03:45

Version Info:
0: [No Data]

Application.Bundler.Outbrowse.14 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Application.Bundler.Outbrowse.14
FireEye	Generic.mg.fa97bf8c13b71e79
Skyhigh	BehavesLike.Win32.Mplug.fh
ALYac	Gen:Variant.Application.Bundler.Outbrowse.14
Malwarebytes	Adware.IStartSurf
VIPRE	Gen:Variant.Application.Bundler.Outbrowse.14
CrowdStrike	win/grayware_confidence_100% (D)
K7GW	Adware ( 004d4c5e1 )
K7AntiVirus	Adware ( 004d4c5e1 )
Arcabit	Trojan.Application.Bundler.Outbrowse.14
BitDefenderTheta	Gen:NN.ZedlaF.36680.yu5@aiqfssgi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/IStartSurf.A potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Gen:Variant.Application.Bundler.Outbrowse.14
NANO-Antivirus	Trojan.Win32.Amonetize.earvne
Emsisoft	Gen:Variant.Application.Bundler.Outbrowse.14 (B)
DrWeb	Trojan.Amonetize.10867
Zillya	Tool.Bundler.Win32.31719
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Adware.Gen
Antiy-AVL	Trojan/Win32.TSGeneric
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Gen:Variant.Application.Bundler.Outbrowse.14
VBA32	Trojan.Amonetize
Rising	Malware.Ymacco!8.11C01 (TFE:5:1LJBrfP6KfC)
Yandex	Riskware.Agent!bkLiC+TvQ4Y
Ikarus	PUA.IStartSurf
Fortinet	Riskware/IStartSurf
DeepInstinct	MALICIOUS

How to remove Application.Bundler.Outbrowse.14?

Application.Bundler.Outbrowse.14 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X