» radio canyon-bg.exe
Overview
Analysis
File Details
Programs (1)

radio canyon-bg.exe

Crossrider Advanced Technologies

Part of the Crossrider framework, a web browser extension that will deliver advertisements such as coupons, price-comparisons, display media, affiliate links, banners, popups/popunders and other links. The application radio canyon-bg.exe by Crossrider Advanced Technologies has been detected as adware by 40 anti-malware scanners. This file is typically installed with the program Radio Canyon by Bright circle investments Ltd. which is a potentially unwanted software program. Part of the Corssrider web browser platform, the BG executable is a background process that manage various function of the installed extensions in user's browser including managing installation, updates and remote code downloads.

File name:

radio canyon-bg.exe

Publisher:

Radio Canyon (signed by Crossrider Advanced Technologies)

Product:

Radio Canyon

Description:

Radio Canyon exe

Version:

1000.1000.1000.1000

MD5:

bad6899666cc6cf7d6f05ee6d78ea5b7

SHA-1:

d7d59965bda2436f9df91b0a4a3bb8c7ff17194e

SHA-256:

eeefd13499de190e45e569cec936ac539e7f6c8dd96efda904664522420f208d

Scanner detections:

40 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements.

Note:

Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is Crossrider Advanced Technologies.

Analysis date:

4/26/2024 4:13:59 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Application.Heur.Qu1@mi@5DDmi

366

AegisLab AV Signature

W32.Alman

2.1.4+

Agnitum Outpost

PUA.Agent

7.1.1

AhnLab V3 Security

PUP/Win32.CrossRider

2015.07.22

Avira AntiVirus

ADWARE/CrossRider.Gen7

7.11.182.186

avast!

Win32:Crossrider-AI [PUP]

2014.9-160204

AVG

Generic

2017.0.2844

Baidu Antivirus

Adware.Win32.CrossAd

4.0.3.1624

Bitdefender

Gen:Application.Heur.Qu1@mi@5DDmi

1.0.20.175

Bkav FE

W32.HfsAdware

1.3.0.6979

Clam AntiVirus

Win.Adware.Agent-29499

0.98/19900

Comodo Security

ApplicUnwnt

22833

Dr.Web

Trojan.Crossrider1.26410

9.0.1.035

Emsisoft Anti-Malware

Gen:Application.Heur.Uu1@maVSfkmi

8.16.02.04.07

ESET NOD32

Win32/Toolbar.CrossRider.BA (variant)

10.10656

Fortinet FortiGate

Adware/Agent

2/4/2016

F-Prot

W32/A-ea13b6b6

v6.4.7.1.166

F-Secure

Gen:Application.Heur.Qu1@mi@5DDmi

11.2016-04-02_5

G Data

Win32.Adware.Crossrider

16.2.24

IKARUS anti.virus

Trojan.GoogUpdate

t3scan.1.7.5.0

K7 AntiVirus

Adware

13.207.16634

Kaspersky

not-a-virus:AdWare.NSIS.Adwapper

14.0.0.713

Malwarebytes

PUP.Optional.HDVid.A

v2016.02.04.07

McAfee

Artemis!50C138DF8DAE

5600.6500

Microsoft Security Essentials

Threat.Undefined

1.187.1147.0

MicroWorld eScan

Gen:Application.Heur.Qu1@mi@5DDmi

17.0.0.105

NANO AntiVirus

Riskware.Win32.Crossrider.dhbhdt

0.28.2.62841

Norman

Gen:Application.Heur.Uu1@kaVSfkmi

11.20160204

Panda Antivirus

Trj/Genetic.gen

16.02.04.07

Qihoo 360 Security

HEUR/QVM10.1.Malware.Gen

1.0.0.1015

Quick Heal

PUA.Crossrider.Gen

2.16.14.00

Reason Heuristics

Adware.Crossrider.CrossriderAdvancedTechnologies (M)

16.2.4.7

Rising Antivirus

PE:Malware.Obscure!1.9C59

23.00.65.16202

Sophos

AppRider

4.98

SUPERAntiSpyware

PUP.RadioCanyon/Variant

9344

Trend Micro House Call

TROJ_GEN.F0C2H00IC14

7.2.35

Trend Micro

TROJ_GEN.R047C0ODP15

10.465.04

Vba32 AntiVirus

AdWare.Adwapper

3.12.26.4

VIPRE Antivirus

Crossrider

34448

Zillya! Antivirus

Trojan.GoogUpdate.Win32.4453

2.0.0.2306

File size:

740.2 KB (757,976 bytes)

Product version:

1000.1000.1000.1000

Original file name:

Radio Canyon.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\radio canyon\radio canyon-bg.exe

Digital Signature

Signed by:

Crossrider Advanced Technologies

Authority:

COMODO CA Limited

Valid from:

9/24/2012 3:00:00 AM

Valid to:

9/25/2015 2:59:59 AM

Subject:

CN=Crossrider Advanced Technologies, O=Crossrider Advanced Technologies, STREET=40 Lilienblum St, L=Tel-Aviv, S=Israel, PostalCode=65133, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00B9966EA31AF5750F30968D041D15669B

File PE Metadata

Compilation timestamp:

11/4/2014 11:39:48 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:0yevh2Mt8oX6C7j4A26c7v7Tde0i54OTWmJg:0xvhNioEA2f7xH4HTPJg

Entry address:

0x68FEA

Entry point:

E8, 4D, CB, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 00, 0C, 4B, 00, E8, 50, 49, 00, 00, E8, C4, 1C, 00, 00, 0F, B7, F0, 6A, 02, E8, E0, CA, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 20, 4F, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8... 
[+]

Entropy:

6.4764

Code size:

593.5 KB (607,744 bytes)

The file radio canyon-bg.exe has been discovered within the following program.

Radio Canyon by Bright circle investments Ltd.

Radio Canyon (Porter Studio Plus) is an adware program (supported by various types of advertising) that is usually bundled by third party installers and download managers.

88% remove it

Remove radio canyon-bg.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.