» video mediaplayer-bho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

video mediaplayer-bho.dll

video MediaPlayer

Robokid Technologies

This web browser extension uses the Crossrider toolbar creation and distribution platform. The module video mediaplayer-bho.dll, “video MediaPlayer BHO” by Robokid Technologies has been detected as adware by 26 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘CrossriderApp0059599’. This file is typically installed with the program video MediaPlayer by Sailor Project which is a potentially unwanted software program. This is the Browser Helper Object (BHO) for the Crossrider web browser platform for Internet Explorer. Instead of utilizing a traditional IE Toolbar, it installs a BHO in the browser in order to manage the functionality of the addon. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.

File name:

Publisher:

enter (signed by Robokid Technologies)

Product:

video MediaPlayer

Description:

video MediaPlayer BHO

Version:

1.1.153.24

MD5:

186bc70686cfea96f2cf48ff2ae64a39

SHA-1:

e630c70db2f31c0ca9b957cd0d8fbebb275ce9c9

SHA-256:

f1e2fd0bdc0d6c50dea01ac762e57bda0dd83a12c02825a429621f72972c2288

Scanner detections:

26 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements.

Note:

Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is Robokid Technologies.

Analysis date:

4/25/2024 5:22:50 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Trojan.Generic.11457336

865

Agnitum Outpost

PUA.Toolbar.CroRi

7.1.1

Avira AntiVirus

Adware/CrossRider.A.13378

7.11.157.134

AVG

Generic

2015.0.3418

Baidu Antivirus

Adware.Win32.CrossRider

4.0.3.14710

Bitdefender

Trojan.Generic.11457336

1.0.20.1325

Comodo Security

ApplicUnwnt

18707

Emsisoft Anti-Malware

Trojan.Generic.11457336

8.14.09.22.01

ESET NOD32

Win32/Toolbar.CrossRider.AF (variant)

8.10015

Fortinet FortiGate

Riskware/CroRi

9/22/2014

F-Prot

W32/A-eb9ef301

v6.4.7.1.166

F-Secure

Trojan.Generic.11457336

11.2014-22-09_2

G Data

Trojan.Generic.11457336

14.9.24

IKARUS anti.virus

AdWare.CrossRider

t3scan.1.6.1.0

K7 AntiVirus

Trojan

13.180.12719

Kaspersky

not-a-virus:WebToolbar.Win32.CroRi

14.0.0.3212

Malwarebytes

PUP.Optional.VideoMediaPlayer.A

v2014.07.10.04

McAfee

Artemis!186BC70686CF

5600.7074

MicroWorld eScan

Trojan.Generic.11457336

15.0.0.795

Panda Antivirus

Trj/Chgt.A

14.09.22.01

Qihoo 360 Security

HEUR/Malware.QVM30.Gen

1.0.0.1015

Reason Heuristics

PUP.Crossrider.RobokidTechnologies.V

14.7.10.4

Rising Antivirus

PE:Malware.Obscure!1.9C59

23.00.65.14708

Sophos

AppRider

4.98

Trend Micro House Call

Suspicious_GEN.F47V0627

7.2.191

VIPRE Antivirus

Crossrider

30762

File size:

601 KB (615,448 bytes)

Product version:

1.1.153.24

Original file name:

video MediaPlayer.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\video mediaplayer\video mediaplayer-bho.dll

Digital Signature

Signed by:

Robokid Technologies

Authority:

COMODO CA Limited

Valid from:

6/23/2014 2:00:00 AM

Valid to:

6/24/2015 1:59:59 AM

Subject:

CN=Robokid Technologies, O=Robokid Technologies, STREET=Athinodorou 3 Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00ECF35E880AD0F3BC6F82DFB1F2E84CC0

File PE Metadata

Compilation timestamp:

6/25/2014 12:07:40 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:Xr0hAy8d/d4n/Vv7B/gtWtnxfSkHTUPZs2BqbmRB:XTi/Vv+tenFSCTUmYRB

Entry address:

0x43AE8

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 7C, B3, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 08, 2E, 08, 10, E8, B9, 30, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 80, A5, 08, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 80, 3C, 07, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

419 KB (429,056 bytes)

Internet Explorer BHO

Display name:

CrossriderApp0059599

CLSID:

{11111111-1111-1111-1111-110511951199}

CLSID name:

video MediaPlayer

The file video mediaplayer-bho.dll has been discovered within the following program.

video MediaPlayer by Sailor Project

video MediaPlayer is an adware web browser application that displays banner ads as well as contextual link ads that are injected in the web page.

crossrider.com

83% remove it

Remove video mediaplayer-bho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.