CrossBrowse

By GoldSparrow in Potentially Unwanted Programs

Threat Scorecard

Ranking: 115
Threat Level: 10 % (Normal)
Infected Computers: 203,707
First Seen: January 14, 2015
Last Seen: March 26, 2024
OS(es) Affected: Windows

The CrossBrowse software can be found on crossbrowse.com and in freeware bundles as a browser enhancer. The CrossBrowse browser enhancer is promoted as a program that will allow users to explore the Internet faster than ever before. However, security researchers perceive the CrossBrowse software as a Potentially Unwanted Program (PUP) with adware functionality because it subjects users to a torrent of advertisements. Additionally, the CrossBrowse app may place links to suspicious online locations on your desktop and install software from third parties as updates to its services. The CrossBrowse adware may attach an add-on, an extension a plugin and a Browser Helper Object to your client in order to execute its operations. You should note that the CrossBrowse adware may record your IP address, typed URLs, search terms and browsing history by using HTTP, session and Flash cookies as well as take screenshots of the pages you visit. Also, the CrossBrowse program can send the collected information to affiliated advertisers that can use CrossBrowse to push marketing content on your screen. The ads by CrossBrowse may take the form of pop-ups, pop-unders, banners, ad panels and in-text hyperlinks to sponsored content. Security researchers advise users to purge the CrossBrowse adware from their system by using a renowned anti-malware solution.

SpyHunter Detects & Remove CrossBrowse

File System Details

CrossBrowse may create the following file(s):
# File Name MD5 Detections
1. crossbrowse.exe ca21045a4b7a53fb95e6c9f0a7b31614 3,873
2. crossbrowser.exe.vir 6b14492d806bfde1e377f335f5f3003b 2,375
3. crossbrowser.exe.vir e67d43e9676a7770d20d8492ba827d59 1,672
4. crossbrowse.exe 6bcfcfa512a003a8043cf2f370b0b479 572
5. chrome.exe 28648e6e5ae374ca6fbb0bb64000b640 502
6. chrome.exe d826b21fd15cc3325d07724538aa83f9 61
7. chrome.exe f0ccb4233b208f7048de56137d7493b7 56
8. crossbrowser.exe 0d716733c22823c8ba12a21514253701 44
9. chrome.bat.exe 65adf57f66de1c4e1985a6bc1c4ca559 19
10. crossbrowser.exe deb42f8bbd3905195501a595138456c3 3
11. crossbrowser.exe 89fb248d04d707489396a7977b66b824 1

Registry Details

CrossBrowse may create the following registry entry or registry entries:
CLSID
{2A563926-CF4B-4363-A760-F71E46205B7E}
File name without path
Crossbrowse.lnk
CrossBrowser.lnk
WebBrowser.lnk
Regexp file mask
%PROGRAMFILES%\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
%PROGRAMFILES(x86)%\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
%WINDIR%\System32\Tasks\Crossbrowse
%WINDIR%\Tasks\Crossbrowse.job
SOFTWARE\Classes\.gif\OpenWithProgids\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.gif\OpenWithProgids\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.gif\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.htm\OpenWithProgIds\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.htm\OpenWithProgIds\CRSBRWSHTML
SOFTWARE\Classes\.htm\OpenWithProgids\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.htm\OpenWithProgIds\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.html\OpenWithProgIds\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.html\OpenWithProgIds\CRSBRWSHTML
SOFTWARE\Classes\.html\OpenWithProgids\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.html\OpenWithProgIds\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.jpeg\OpenWithProgids\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.jpeg\OpenWithProgids\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.jpeg\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.jpg\OpenWithProgids\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.jpg\OpenWithProgids\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.jpg\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.pdf\OpenWithProgids\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.pdf\OpenWithProgids\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.pdf\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.png\OpenWithProgids\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.png\OpenWithProgids\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.png\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.shtml\OpenWithProgids\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.shtml\OpenWithProgids\CRSBRWSHTML
SOFTWARE\Classes\.shtml\OpenWithProgids\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.shtml\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.webp\OpenWithProgids\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.webp\OpenWithProgids\CRSBRWSHTML
SOFTWARE\Classes\.webp\OpenWithProgids\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.webp\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.xht\OpenWithProgIds\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.xht\OpenWithProgIds\CRSBRWSHTML
SOFTWARE\Classes\.xht\OpenWithProgIds\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.xht\OpenWithProgIds\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.xhtml\OpenWithProgIds\CrossHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.xhtml\OpenWithProgIds\CRSBRWSHTML
SOFTWARE\Classes\.xhtml\OpenWithProgIds\WebHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\.xhtml\OpenWithProgIds\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Classes\Crossbrowse
SOFTWARE\Classes\CRSBRWSHTML
SOFTWARE\Clients\StartMenuInternet\Crossbrowse
Software\Crossbrowse
Software\CrossBrowser
SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\crossbrowse.exe
SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\crossbrowser.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Crossbrowse.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Crossbrowse.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Crossbrowse
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Run_Browserby_Browser
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\crossbrowse.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\crossbrowser.exe
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\OpenWithProgids\XBrowserHTM.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\RegisteredApplications\Crossbrowse
SOFTWARE\RegisteredApplications\CrossBrowser.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\RegisteredApplications\WebBrowser.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Crossbrowse
SOFTWARE\Wow6432Node\Crossbrowse
SOFTWARE\Wow6432Node\CrossBrowser
SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\crossbrowse.exe
SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\crossbrowser.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\crossbrowse.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\crossbrowser.exe
SOFTWARE\Wow6432Node\RegisteredApplications\CrossBrowser.NSJA6BHDA3NCFCFMXW3QSCUYUQ
SOFTWARE\Wow6432Node\RegisteredApplications\WebBrowser.NSJA6BHDA3NCFCFMXW3QSCUYUQ

Directories

CrossBrowse may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Crossbrowse
%APPDATA%\Microsoft\Windows\Start Menu\Programs\CrossBrowser
%LOCALAPPDATA%\CrossBrowser
%LOCALAPPDATA%\Crossbrowse
%LOCALAPPDATA%\WebBrowser
%PROGRAMFILES%\Crossbrowse
%PROGRAMFILES(x86)%\Crossbrowse
%UserProfile%\Local Settings\Application Data\CrossBrowser
%UserProfile%\Local Settings\Application Data\Crossbrowse

Related Posts

Trending

Most Viewed

Loading...