home

uninstall.exe

Robokid Technologies

By using the Crossrider framework, this web extension is loaded in the web browser and displays advertisments on web pages not affiliated by the extension or company. These unwanted advertisements are injected by the extension in the browser in the form of common ad types such as banners and text-links. The application uninstall.exe by Robokid Technologies has been detected as adware by 19 anti-malware scanners. This is the uninstaller utility registered in the Windows Control Panel for the program V-9.1HD by V-9.1HD. It is built using the Crossrider cross-browser extension platform. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. It is distributed as part of the Brightcircle group of browser-extensions.
Publisher:
Robokid Technologies  (signed and verified)

MD5:
ae43568b9ce52270f09efb7eb30710fb

SHA-1:
561830a1bd406e03d845afcaa77d96799af699dd

SHA-256:
8c66abcfc5c4fbefdb96b6c38916ae4a19bac19d3217158029ac03ceaa4ddb4a

Scanner detections:
19 / 68

Status:
Adware

Explanation:
The software may change the browser's home page and search provider settings as well as display advertisements. Distributed through the Brightcircle investments brand.

Analysis date:
4/19/2024 8:50:54 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Application.Heur.gqX@lWByMxai
6213306

AhnLab V3 Security
Win-PUP/CrossRider
2014.12.22

AVG
Generic
2015.0.3253

Bitdefender
Gen:Application.Heur.gqX@lWByMxai
1.0.20.1780

Dr.Web
Trojan.Crossrider.27207
9.0.1.05190

Emsisoft Anti-Malware
Gen:Application.Heur.gqX@lWByMxai
9.0.0.4668

ESET NOD32
Win32/Toolbar.CrossRider.AW potentially unwanted application
7.0.302.0

F-Prot
W32/S-5bd39aa9
v6.4.7.1.166

F-Secure
Riskware.Gen:Application.Heur.gqX@lWByMxai
5.13.68

G Data
Gen:Application.Heur.gqX@lWByMxai
14.12.24

Kaspersky
not-a-virus:WebToolbar.Win32.CroRi
15.0.0.543

MicroWorld eScan
Gen:Application.Heur.gqX@lWByMxai
15.0.0.1068

NANO AntiVirus
Trojan.Win32.GoogUpdate.dhidqm
0.28.6.64267

Norman
Gen:Application.Heur.gqX@lWByMxai
04.12.2014 14:30:06

Panda Antivirus
Trj/Genetic.gen
14.12.22.04

Reason Heuristics
PUP.RobokidTechnologies.J
14.12.22.4

Sophos
PUA 'AppRider' (of type Adware)
5.09

Vba32 AntiVirus
Trojan.GoogUpdate
3.12.26.3

Zillya! Antivirus
Trojan.GoogUpdate.Win32.917
2.0.0.2012

File size:
101.5 KB (103,960 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\v-9.1hd\uninstall.exe

Digital Signature
Signed by:
Robokid Technologies

Authority:
COMODO CA Limited

Valid from:
6/23/2014 1:00:00 AM

Valid to:
6/24/2015 12:59:59 AM

Subject:
CN=Robokid Technologies, O=Robokid Technologies, STREET=Athinodorou 3 Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00ECF35E880AD0F3BC6F82DFB1F2E84CC0

File PE Metadata
Compilation timestamp:
7/26/2014 11:03:32 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1536:Kb9/p4DF7TGzK8ZBxZft/E0neepzc1C1sWjcdHw9XSuz8:m/8FvqHHMtC6Hw9XSuz8

Entry address:
0x5D15

Entry point:
E8, 38, 66, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, F8, 7F, 41, 00, E8, 25, 0A, 00, 00, E8, D1, 32, 00, 00, 0F, B7, F0, 6A, 02, E8, CB, 65, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, AC, 5F, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.3464

Code size:
69.5 KB (71,168 bytes)

Program Uninstaller
Program name:
V-9.1HD

Display publisher:
V-9.1HD

Display version:
1.34.7.1

Uninstall string:
C:\Program Files\V-9.1HD\Uninstall.exe /fcp=1


Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.