utilhulatoo.exe

HulaToo

Part of the Yontoo adware component, a web browser plugin that injects unwanted ads in the browser. The application utilhulatoo.exe by HulaToo has been detected as adware by 9 anti-malware scanners. It runs as a separate (within the context of its own process) windows Service named “Update HulaToo”. Additionally, the file is typically installed by a number of programs including HulaToo by Yontoo Technology, Inc. and Buzzdock by Alactro LLC, both potentially unwanted software. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.
Publisher:
HulaToo  (signed and verified)

Version:
1.0.5316.35631

MD5:
688561ac8f9910bc92a095e53b5dbdbb

SHA-1:
fe9ed2924cfb0e6890d6fdc59e391b0aebf4ec8a

SHA-256:
3a58375dc913ec232533326fb47d9141080ba28fb23e9a1581479a00e850b886

Scanner detections:
9 / 68

Status:
Adware

Explanation:
Injects advertising in the web browser in various formats.

Analysis date:
4/19/2024 11:51:14 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Hulaoo
2015.0.3404

Baidu Antivirus
Adware.Win32.BrowseFox
4.0.3.14723

ESET NOD32
Win32/BrowseFox (variant)
8.10142

IKARUS anti.virus
PUA.BrowseFox
t3scan.1.6.1.0

Malwarebytes
PUP.Optional.HulaToo.A
v2014.07.23.12

McAfee
Artemis!688561AC8F99
5600.7060

Reason Heuristics
PUP.HulaToo.L
14.7.23.12

Trend Micro House Call
Suspicious_GEN.F47V0723
7.2.204

VIPRE Antivirus
Trojan.Win32.Generic
31530

File size:
314.3 KB (321,816 bytes)

Product version:
1.0.5316.35631

Original file name:
HulaToo.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\hulatoo\bin\utilhulatoo.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
3/19/2014 1:00:00 AM

Valid to:
3/20/2015 12:59:59 AM

Subject:
CN=HulaToo, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=HulaToo, L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
089F9EDFF3BE5DAC5EE5E228073DBDC4

File PE Metadata
Compilation timestamp:
7/22/2014 9:47:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:hBNBn8x1S3zlAIrvkyRFdf8Cty1Ms7wq8xVXixcpbMKZ:hBNBs1ZIrv+xh8rCKZ

Entry address:
0x4E59A

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
305.5 KB (312,832 bytes)

Service
Display name:
Update HulaToo

Type:
Win32OwnProcess


The file utilhulatoo.exe has been discovered within the following programs.

Buzzdock  by Alactro LLC
This is a web browser extension that injects advertising. From the EULA: "Buzzdock is free to download and use. Buzzdock is supported by advertising, and users will see additional ads on websites where Buzzdock features operate.
www.buzzdock.com/faq-support
79% remove it
HulaToo  by Yontoo Technology, Inc.
HulaToo is a Yontoo (Sambreel Holdings) branded adware that injects advertising in the user's Internet browser by running as an extension and/or add-on. Ads are delivered in the form of banners and text-links (roll-overs) as well as some popup ads.
hulatoo.net/support
83% remove it
 
Powered by Should I Remove It?

Remove utilhulatoo.exe - Powered by Reason Core Security