» SuperSocket.ClientEngine.Common.dll
Overview
Analysis
File Details

SuperSocket.ClientEngine.Common.dll

SuperSocket ClientEngine

Robokid Technologies

By using the Crossrider framework, this web extension is loaded in the web browser and displays advertisments on web pages not affiliated by the extension or company. These unwanted advertisements are injected by the extension in the browser in the form of common ad types such as banners and text-links. The module SuperSocket.ClientEngine.Common.dll, “SuperSocket.ClientEngine.Common for .Net 2.0” by Robokid Technologies has been detected as adware by 9 anti-malware scanners. The library is built using the Crossrider cross-browser extension platform. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. It is distributed as part of the Brightcircle group of browser-extensions.

File name:

Publisher:

SuperSocket (signed by Robokid Technologies)

Product:

SuperSocket ClientEngine

Description:

SuperSocket.ClientEngine.Common for .Net 2.0

Version:

0.3.0.0

MD5:

1d8c1acf9f5949a392309f9df72bea77

SHA-1:

d35186262ad861cbe9f883d946f67d6ea58fe38f

SHA-256:

cf13e002e4955ba56cbd3d05a04c5ae0b66d7c4cba34d469cde5c783f211e984

Scanner detections:

9 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements. Distributed through the Brightcircle investments brand.

Analysis date:

4/19/2024 3:24:33 PM UTC (today)

Scan engine

Detection

Engine version

AVG

Generic

2015.0.3363

Baidu Antivirus

Adware.Win64.Crossrider

4.0.3.1492

Dr.Web

Trojan.Crossrider.28247

9.0.1.05190

IKARUS anti.virus

PUA.Plush

t3scan.1.6.1.0

NANO AntiVirus

Trojan.Win32.GoogUpdate.deefsh

0.28.2.61861

Reason Heuristics

PUP.RobokidTechnologies.DD

14.9.2.15

Sophos

AppRider

4.98

Vba32 AntiVirus

TScope.Trojan.MSIL

3.12.26.3

VIPRE Antivirus

Threat.4150696

31208

File size:

20.5 KB (21,016 bytes)

Product version:

0.3.0.0

Original file name:

SuperSocket.ClientEngine.Common.dll

File type:

Dynamic link library (Win32 DLL)

Language:

Language Neutral

Common path:

C:\Program Files\cinedpv2\supersocket.clientengine.common.dll

Digital Signature

Signed by:

Robokid Technologies

Authority:

COMODO CA Limited

Valid from:

6/23/2014 1:00:00 AM

Valid to:

6/24/2015 12:59:59 AM

Subject:

CN=Robokid Technologies, O=Robokid Technologies, STREET=Athinodorou 3 Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00ECF35E880AD0F3BC6F82DFB1F2E84CC0

File PE Metadata

Compilation timestamp:

4/11/2014 3:22:22 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

11.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

384:a64b8rYkcUTMdzJzga3Vmt1xf3Qa/qOle+1aRu7/2hjwO+dWf2M:o8iUTMdzJkEMnlQa/q+YR5jwO+Qf2M

Entry address:

0x5FBE

Entry point:

FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

5.6099

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

16 KB (16,384 bytes)

Remove SuperSocket.ClientEngine.Common.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.