SuperSocket.ClientEngine.Protocol.dll

SuperSocket ClientEngine

Space Battleship Creative

This adware is a web browser extension that will inject advertising in the browser in the form of unwanted banners and text-links which may link to malware sites and install unwanted software. The module SuperSocket.ClientEngine.Protocol.dll, “SuperSocket.ClientEngine.Protocol for .NET 2.0” by Space Battleship Creative has been detected as adware by 19 anti-malware scanners. The library is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.
Publisher:
SuperSocket  (signed by Space Battleship Creative)

Product:
SuperSocket ClientEngine

Description:
SuperSocket.ClientEngine.Protocol for .NET 2.0

Version:
0.3.0.0

MD5:
ddef79c51f08ea4e40368980fba8171a

SHA-1:
273d2b1c2b25ce508276768f1afb1dc34abae963

SHA-256:
7668c49b755256f15bbd1d2b7033f6e7c63728c063d01cd9eb8017c0cc95db00

Scanner detections:
19 / 68

Status:
Adware

Explanation:
The software may change the browser's home page and search provider settings as well as display advertisements.

Analysis date:
4/24/2024 2:05:37 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/CrossRider.pl
7.11.170.102

AVG
Generic
2016.0.3213

Baidu Antivirus
Adware.Win64.Crossrider
4.0.3.15130

Clam AntiVirus
Win.Trojan.Googupdate-13
0.98/20000

ESET NOD32
Win32/Toolbar.CrossRider.BM potentially unwanted application
7.0.302.0

IKARUS anti.virus
PUA.Plush
t3scan.1.7.5.0

K7 AntiVirus
Riskware
13.183.13166

Kaspersky
not-a-virus:AdWare.NSIS.Adwapper
15.0.0.543

McAfee
Artemis!A75885E9BADB
5600.6869

NANO AntiVirus
Trojan.Win32.GoogUpdate.dkjwbo
0.28.6.64267

nProtect
Trojan/W32.Agent.19888.B
14.11.13.01

Panda Antivirus
Trj/Chgt.E
15.01.30.01

Qihoo 360 Security
Win32/Virus.Adware.960
1.0.0.1015

Reason Heuristics
PUP.Brightcircle
15.1.30.13

Sophos
AppRider
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Artemis
10084

Trend Micro House Call
Suspicious_GEN.F47V0821
7.2.30

Vba32 AntiVirus
Trojan.GoogUpdate
3.12.26.3

VIPRE Antivirus
Trojan.Win32.Generic
32606

File size:
19.4 KB (19,888 bytes)

Product version:
0.3.0.0

Copyright:
Copyright © clientengine.codeplex.com 2012

Original file name:
SuperSocket.ClientEngine.Protocol.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\cinema video pro 2.1v16.11\supersocket.clientengine.protocol.dll

Digital Signature
Authority:
COMODO CA Limited

Valid from:
10/20/2014 2:00:00 AM

Valid to:
10/21/2015 1:59:59 AM

Subject:
CN=Space Battleship Creative, O=Space Battleship Creative, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F7CD27D419D6D6EBEEE61F75941D1DA4

File PE Metadata
Compilation timestamp:
4/11/2014 4:22:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:j0K1XmogLQQkmW8GdaO6cWmgLq02H0l82gCE:zXm/n6dkmgLq0E3CE

Entry address:
0x51CE

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 48, 00, 00, 00, 58, 60, 00, 00, 44, 04...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
12.5 KB (12,800 bytes)

Remove SuperSocket.ClientEngine.Protocol.dll - Powered by Reason Core Security