» enformation-nova.dll
Overview
Analysis
File Details
Programs (1)

enformation-nova.dll

Robokid Technologies

By using the Crossrider framework, this web extension is loaded in the web browser and displays advertisments on web pages not affiliated by the extension or company. These unwanted advertisements are injected by the extension in the browser in the form of common ad types such as banners and text-links. The module enformation-nova.dll by Robokid Technologies has been detected as adware by 22 anti-malware scanners. This file is typically installed with the program enformation by Robokid Technologies which is a potentially unwanted software program. It is distributed as part of the Brightcircle group of browser-extensions.

File name:

Publisher:

Robokid Technologies (signed and verified)

MD5:

e6dae2eb453abc5e8293f3a13db8bd4a

SHA-1:

118ea4036d8a5b739389daddf8f7f537319b22b2

SHA-256:

b23bf9644856bba1d6e52460a5aaaccd837f06237e1eb7215fe25ee57822ad91

Scanner detections:

22 / 68

Status:

Adware

Explanation:

May modify the web browser's settings including changing the homepage and search provider in addition to delivering ads (by injecting banner and text-links directly in the webpage). Distributed through the Brightcircle investments brand.

Analysis date:

4/19/2024 8:37:41 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Adware.Generic.989720

896

Agnitum Outpost

PUA.AdLoad

7.1.1

Avira AntiVirus

Adware/Agent.130432

7.11.164.128

AVG

Generic

2015.0.3411

Baidu Antivirus

Adware.Win32.CrossRider

4.0.3.14716

Bitdefender

Adware.Generic.989720

1.0.20.1170

Emsisoft Anti-Malware

Adware.Generic.989720

8.14.08.22.06

ESET NOD32

probably Win32/Toolbar.CrossRider.AI potentially unwanted application

7.0.302.0

Fortinet FortiGate

Adware/Adload

8/22/2014

F-Secure

Adware.Generic.989720

11.2014-22-08_6

G Data

Adware.Generic.989720

14.8.24

K7 AntiVirus

Trojan

13.181.12872

Kaspersky

not-a-virus:AdWare.Win32.AdLoad

14.0.0.3366

McAfee

Artemis!BD23E550DA58

5600.7030

MicroWorld eScan

Adware.Generic.989720

15.0.0.702

Panda Antivirus

Trj/Genetic.gen

14.08.22.06

Reason Heuristics

PUP.RobokidTechnologies.Q

14.7.15.16

Rising Antivirus

PE:Malware.Bundlore!6.180F

23.00.65.14820

Sophos

Generic PUA DG

4.98

Trend Micro House Call

TROJ_GEN.R0C1H07GC14

7.2.234

Vba32 AntiVirus

AdWare.AdLoad

3.12.26.3

VIPRE Antivirus

Threat.4150696

31208

File size:

124 KB (127,000 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\enformation\enformation-nova.dll

Digital Signature

Signed by:

Robokid Technologies

Authority:

COMODO CA Limited

Valid from:

6/22/2014 5:00:00 PM

Valid to:

6/23/2015 4:59:59 PM

Subject:

CN=Robokid Technologies, O=Robokid Technologies, STREET=Athinodorou 3 Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00ECF35E880AD0F3BC6F82DFB1F2E84CC0

File PE Metadata

Compilation timestamp:

7/14/2014 3:03:32 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

1536:mWM+M9SPXMHA9IGTotExFU5JZkmE0++Zc840GsWjcdovTDBd54uP:mWhMUkg94tbsB+h9povTDBd54uP

Entry address:

0x60B8

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 8D, 38, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, A8, 9A, 01, 10, E8, D9, 14, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 4C, C2, 01, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 50, 50, 01, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

6.0784

Developed / compiled with:

Microsoft Visual C++

Code size:

72.5 KB (74,240 bytes)

The file enformation-nova.dll has been discovered within the following program.

enformation by Robokid Technologies

enformation is an advertising supported (adware) extension that runs in the context of the user's web browser as well as a process in the background.

80% remove it

Remove enformation-nova.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.