» hdvid-codec v9.0-bho64.dll
Overview
Analysis
File Details
Programs (1)

hdvid-codec v9.0-bho64.dll

HDvid-Codec V9.0

installdaddy

The module hdvid-codec v9.0-bho64.dll, “HDvid-Codec V9.0 BHO” has been detected as adware by 14 anti-malware scanners. This file is typically installed with the program HDvid-Codec V9.0 by CoolMirage Ltd. which is a potentially unwanted software program. This is the 64-bit version of the Browser Helper Object (BHO) for the Crossrider web browser platform for Internet Explorer. Instead of utilizing a traditional IE Toolbar, Crossrider installs a BHO in the browser in order to manage the functionality of installdaddy addon.

File name:

Publisher:

installdaddy

Product:

HDvid-Codec V9.0

Description:

HDvid-Codec V9.0 BHO

Version:

1000.1000.1000.1000

MD5:

c8a99350df91c827f8a38c7ff334dd66

SHA-1:

7c1c85083c259c9d680457b0e7fd469b6732da9c

SHA-256:

af718eba8271967a8b7525dccfdcd9ce3a623edfbb122e3d5fa1e60f47723510

Scanner detections:

14 / 68

Status:

Adware

Explanation:

InstallDaddy bunldes adware such as toolbars and unwanted browser extensions.

Note:

Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application.

Analysis date:

4/25/2024 6:31:57 PM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

PUA.AdLoad

7.1.1

Avira AntiVirus

ADWARE/CrossRider.Gen2

7.11.163.2

AVG

MalSign.Skodna

2015.0.3335

Baidu Antivirus

Adware.Win64.Crossrider

4.0.3.1458

ESET NOD32

Win64/Toolbar.Crossrider (variant)

8.9639

Fortinet FortiGate

Adware/Toolbar_CrossRider

10/1/2014

IKARUS anti.virus

AdWare.Adload

t3scan.1.6.1.0

Malwarebytes

PUP.Optional.HDvidCodec.A

v2014.05.08.12

McAfee

Artemis!E491B7142B42

5600.6991

Panda Antivirus

Adware/Goobzo

14.10.01.12

Qihoo 360 Security

Win32/Trojan.Adware.37e

1.0.0.1015

Reason Heuristics

PUP.Crossrider.installdaddy.V

14.5.8.12

Trend Micro House Call

TROJ_GEN.F47V0220

7.2.128

VIPRE Antivirus

Crossrider

28074

File size:

927 KB (949,248 bytes)

Product version:

1000.1000.1000.1000

Original file name:

HDvid-Codec V9.0.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\hdvid-codec v9.0\hdvid-codec v9.0-bho64.dll

Registration

CLSIDs:

{11111111-1111-1111-1111-110511131156}, {22222222-2222-2222-2222-220522132256}

ProgIDs:

CrossriderApp0051356.BHO.1, CrossriderApp0051356.Sandbox.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

2/4/2014 2:16:13 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:zRHcCOTo0swkPETYBKubKT2OuzEMBPTfs2lTmMvUQfoq:zRBLmYU9SD7FTTfvz

Entry address:

0x75CAC

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 6F, D3, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 20, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 56, 57, 41, 56, 48, 83, EC, 50, 49, 8B, F0, 8B, DA, 4C, 8B, F1, BA, 01, 00, 00, 00, 89, 50, B8, 85, DB, 75, 0F, 39, 1D, 70, A3, 06, 00, 75, 07, 33, C0, E9, D2, 00, 00, 00, 8D, 43, FF... 
[+]

Code size:

617.5 KB (632,320 bytes)

The file hdvid-codec v9.0-bho64.dll has been discovered within the following program.

HDvid-Codec V9.0 by CoolMirage Ltd.

HDVidCodec is an adware (advertising support) web browser application that is designed to display banner ads as well as contextual link ads (such as hyperlinks the user will see underlined).

www.coolmirage.com

80% remove it

Remove hdvid-codec v9.0-bho64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.