» hdtubev1.6-nova.dll
Overview
Analysis
File Details
Programs (1)

hdtubev1.6-nova.dll

Robokid Technologies

By using the Crossrider framework, this web extension is loaded in the web browser and displays advertisments on web pages not affiliated by the extension or company. These unwanted advertisements are injected by the extension in the browser in the form of common ad types such as banners and text-links. The module hdtubev1.6-nova.dll by Robokid Technologies has been detected as adware by 22 anti-malware scanners. This file is typically installed with the program HDtubeV1.6 by Robokid Technologies which is a potentially unwanted software program. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.

File name:

hdtubev1.6-nova.dll

Publisher:

Robokid Technologies (signed and verified)

MD5:

94baace26cbc825d29f9f86a534b90e2

SHA-1:

8dfe48f8ed71559de81cb9b6bba916b6c5abea97

SHA-256:

502dc85bb59a50069f90a183d8f4d86f04ebb51a9985ed2c2b4ff851e85b46d6

Scanner detections:

22 / 68

Status:

Adware

Explanation:

Bundles a number of adware programs in the installer.

Analysis date:

4/25/2024 6:58:03 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Adware.Generic.989720

896

Agnitum Outpost

PUA.AdLoad

7.1.1

Avira AntiVirus

Adware/Agent.130432

7.11.164.128

AVG

Generic

2015.0.3422

Baidu Antivirus

Adware.Win32.CrossRider

4.0.3.1476

Bitdefender

Adware.Generic.989720

1.0.20.1170

Emsisoft Anti-Malware

Adware.Generic.989720

8.14.08.22.06

ESET NOD32

Win32/Toolbar.CrossRider.AI potentially unwanted application

7.0.302.0

Fortinet FortiGate

Adware/Adload

8/22/2014

F-Secure

Adware.Generic.989720

11.2014-22-08_6

G Data

Adware.Generic.989720

14.8.24

K7 AntiVirus

Trojan

13.181.12872

Kaspersky

not-a-virus:AdWare.Win32.AdLoad

14.0.0.3366

McAfee

Artemis!BD23E550DA58

5600.7030

MicroWorld eScan

Adware.Generic.989720

15.0.0.702

Panda Antivirus

Trj/Genetic.gen

14.08.22.06

Reason Heuristics

PUP.RobokidTechnologies.O

14.7.6.6

Rising Antivirus

PE:Malware.Bundlore!6.180F

23.00.65.14820

Sophos

Generic PUA DG

4.98

Trend Micro House Call

TROJ_GEN.R0C1H07GC14

7.2.234

Vba32 AntiVirus

AdWare.AdLoad

3.12.26.3

VIPRE Antivirus

CoolMirage Ltd

31732

File size:

127 KB (130,072 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\hdtubev1.6\hdtubev1.6-nova.dll

Digital Signature

Signed by:

Robokid Technologies

Authority:

COMODO CA Limited

Valid from:

6/23/2014 3:00:00 AM

Valid to:

6/24/2015 2:59:59 AM

Subject:

CN=Robokid Technologies, O=Robokid Technologies, STREET=Athinodorou 3 Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00ECF35E880AD0F3BC6F82DFB1F2E84CC0

File PE Metadata

Compilation timestamp:

7/5/2014 1:03:30 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

1536:sF/cRqtYOZkdPH3wNZsVtBFE83JSkXEsMzx++scgV8J4nsWjcdmc9RDfg/M29X:smR+nCP3w6tE8EsM0+GFImc9RD4E29X

Entry address:

0x6418

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, FF, 38, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 58, 9B, 01, 10, E8, D9, 14, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 4C, C2, 01, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, E0, 50, 01, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

6.0796

Developed / compiled with:

Microsoft Visual C++

Code size:

74.5 KB (76,288 bytes)

The file hdtubev1.6-nova.dll has been discovered within the following program.

HDtubeV1.6 by Robokid Technologies

HDTube is an adware web browser application that displays banner ads as well as contextual link ads that are injected in the web page.

crossrider.com

80% remove it

Remove hdtubev1.6-nova.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.