Categories: Malware

What is “Application.Bundler.Outbrowse.BA”?

The Application.Bundler.Outbrowse.BA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Bundler.Outbrowse.BA virus can do?

Attempts to connect to a dead IP:Port (2 unique times)
Presents an Authenticode digital signature
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Performs some HTTP requests
Uses Windows utilities for basic functionality
Checks the version of Bios, possibly for anti-virtualization
Collects information to fingerprint the system

Related domains:

serv.the-app-data.info

How to determine Application.Bundler.Outbrowse.BA?


File Info:
crc32: 820A6048md5: 00f89efd62f22bba2a2659b81b60620dname: evasi0n8.exesha1: 6aec94811caba20746ce2a4dd42db5325f6de246sha256: aa1eeee74adf95c0f4d6253af5c03e16aa8d9b8d5a03993c6400607a0c0f7cacsha512: b96d3ebb4175c1f359e86e6c8bae393bf17a4d4f3fb5cea0143d6e9f3cf10ee2c27c38d068b5ba9e89760419e60746cc1bc7e4f4f285c808e252f2950e45fab4ssdeep: 12288:jMiy4IadS4ms5I6e66fEheKhVsPN3S9MbCx7rXd1xsNJGh/T4HRxv/vcOc6PsxRD:jbSaE4mvt/AKKXVsNM/kRxv/BPsVD5rtype: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: SetupAssembly Version: 1.9.3.0InternalName: Ionic.Zip-2015Mar01-191854-680ad00e-12b7-4fe8-b9f3-323a32a5bb4a.exeFileVersion: 1.9.3.0ProductName: SetupProductVersion: 1.9.3.0FileDescription: SetupOriginalFilename: Ionic.Zip-2015Mar01-191854-680ad00e-12b7-4fe8-b9f3-323a32a5bb4a.exe

Application.Bundler.Outbrowse.BA also known as:

Bkav	W32.HfsAdware.1487
MicroWorld-eScan	Application.Bundler.Outbrowse.BA
CAT-QuickHeal	PUA.Startnow2.Gen
Qihoo-360	Win32/Virus.Adware.b51
McAfee	Artemis!00F89EFD62F2
Cylance	Unsafe
VIPRE	OutBrowse
Sangfor	Malware
CrowdStrike	win/malicious_confidence_70% (D)
BitDefender	Application.Bundler.Outbrowse.BA
K7GW	Trojan ( 00550f461 )
K7AntiVirus	Trojan ( 00550f461 )
Baidu	NSIS.Adware.Generic.d
F-Prot	W32/OutBrowse.M
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	NSIS:OutBrowse-CT [PUP]
ClamAV	Win.Adware.Outbrowse-1419
GData	NSIS.Application.OutBrowse.AC
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
NANO-Antivirus	Trojan.Win32.Generic.dorbni
AegisLab	Adware.Win32.OutBrowse.2!c
Rising	Adware.OutBrowse!8.376 (CLOUD)
Emsisoft	Application.Downloader (A)
Comodo	ApplicUnwnt@#2kqfp2utyynlq
F-Secure	PotentialRisk.PUA/Outbrowse.Gen
DrWeb	Trojan.OutBrowse.488
Zillya	Adware.OutBrowseCRTD.Win32.5195
Invincea	heuristic
McAfee-GW-Edition	Adware-OutBrowse.e
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.00f89efd62f22bba
Sophos	OutBrowse Revenyou (PUA)
Ikarus	PUA.OutBrowse
Cyren	W32/Application.BPWM-0154
Webroot	Pua.Secure.Installer
Avira	Setup.exe
MAX	malware (ai score=86)
Antiy-AVL	GrayWare[AdWare]/Win32.AGeneric
Endgame	malicious (high confidence)
Arcabit	Application.Bundler.Outbrowse.BA
SUPERAntiSpyware	Adware.OutBrowse/Variant
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Generic
Microsoft	SoftwareBundler:Win32/OutBrowse
BitDefenderTheta	Gen:NN.ZedlaF.34108.ju4@aGZub8ei
VBA32	AdWare.OutBrowse
Panda	Trj/CI.A
ESET-NOD32	Win32/OutBrowse.BU potentially unwanted
Tencent	Malware.Win32.Gencirc.10b0c6a3
Yandex	PUA.OutBrowse!
SentinelOne	DFI – Malicious PE
Fortinet	Riskware/OutBrowse
AVG	NSIS:OutBrowse-CT [PUP]