» WebSocket4Net.dll
Overview
Analysis
File Details
Programs (1)

WebSocket4Net.dll

Naruto Source

This adware is a web browser extension that will inject advertising in the browser in the form of unwanted banners and text-links which may link to malware sites and install unwanted software. The module WebSocket4Net.dll, “WebSocket4Net for .NET 2.0” by Naruto Source has been detected as adware by 22 anti-malware scanners. This file is typically installed with the program Internet Speed Checker by Sailor Project which is a potentially unwanted software program. The library is built using the Crossrider cross-browser extension platform. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. It is distributed as part of the Brightcircle group of browser-extensions.

File name:

WebSocket4Net.dll

Publisher:

WebSocket4Net (signed by Naruto Source)

Product:

WebSocket4Net

Description:

WebSocket4Net for .NET 2.0

Version:

0.9.0.0

MD5:

25cec81e5bb0ac753911da4e85aca78e

SHA-1:

8c7dcdeb842f1dfa49bac1148d6a2bc8b1027f45

SHA-256:

0e9e027601965d3b62f2689ebde04a4ac46a139fce36f7ec3daa207cdb4a7429

Scanner detections:

22 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements. Distributed through the Brightcircle investments brand.

Analysis date:

4/25/2024 7:46:37 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Adware.SwiftBrowse.BW

864

Avira AntiVirus

Adware/CrossRider.pq

7.11.170.170

AVG

Generic

2015.0.3342

Baidu Antivirus

Adware.NSIS.Adwapper

4.0.3.14923

Bitdefender

Adware.SwiftBrowse.BW

1.0.20.1330

Dr.Web

Trojan.Crossrider.28247

9.0.1.0266

Emsisoft Anti-Malware

Adware.SwiftBrowse.BW

8.14.09.23.12

F-Prot

W32/A-7f649687

v6.4.7.1.166

F-Secure

Adware.SwiftBrowse.BW

11.2014-23-09_3

G Data

Adware.SwiftBrowse.BW

14.9.24

herdProtect (fuzzy)

variant of websocket4net_iobitdel.dll (Adware)

2014.12.5.15

IKARUS anti.virus

PUA.Plush

t3scan.1.7.5.0

Kaspersky

not-a-virus:AdWare.NSIS.Adwapper

14.0.0.3207

McAfee

Artemis!9A06F3B9D926

5600.6998

MicroWorld eScan

Adware.SwiftBrowse.BW

15.0.0.798

nProtect

Trojan-Clicker/W32.Agent.64360

14.08.26.01

Panda Antivirus

Trj/Chgt.D

14.09.23.12

Qihoo 360 Security

Win32/Virus.Adware.970

1.0.0.1015

Reason Heuristics

PUP.NarutoSource.N

14.9.23.12

Sophos

Generic PUA FB

4.98

Trend Micro House Call

Suspicious_GEN.F47V0816

7.2.266

Vba32 AntiVirus

Trojan.GoogUpdate

3.12.26.3

File size:

62.9 KB (64,360 bytes)

Product version:

0.9.0.0

Original file name:

WebSocket4Net.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\internet speed checker\websocket4net.dll

Digital Signature

Signed by:

Naruto Source

Authority:

COMODO CA Limited

Valid from:

7/28/2014 2:00:00 AM

Valid to:

7/29/2015 1:59:59 AM

Subject:

CN=Naruto Source, O=Naruto Source, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

1CE82906A7F364268F66771839675655

File PE Metadata

Compilation timestamp:

5/26/2014 3:13:38 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

11.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

1536:XrKEBvRG7IE/kWkMm+kDjHz66x8ljDAMIonIg7TgA:XrXBv07cEm+knHz66iljDAMIonIg7Td

Entry address:

0xFFCE

Entry point:

FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 48, 00, 00, 00, 58, 00, 01, 00, AC, 03... 
[+]

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

56 KB (57,344 bytes)

The file WebSocket4Net.dll has been discovered within the following program.

Internet Speed Checker by Sailor Project

Internet Speed Checker is an adware web browser application that displays banner ads as well as contextual link ads that are injected in the web page.

62% remove it

Remove WebSocket4Net.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.