» radio canyon-bho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

radio canyon-bho.dll

Porter Studio Plus

This web browser extension uses the Crossrider toolbar creation and distribution platform. The module radio canyon-bho.dll by Porter Studio Plus has been detected as adware by 33 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘71c6c330e74701318a6f0adb73eaa5ae0060804’. This file is typically installed with the program Radio Canyon by Bright circle investments Ltd. which is a potentially unwanted software program. This is the Browser Helper Object (BHO) for the Crossrider web browser platform for Internet Explorer. Instead of utilizing a traditional IE Toolbar, it installs a BHO in the browser in order to manage the functionality of the addon. It is distributed as part of the Brightcircle group of browser-extensions.

File name:

Publisher:

Radio Canyon (signed by Porter Studio Plus)

Product:

Radio Canyon

Description:

Radio Canyon BHO

Version:

1000.1000.1000.1000

MD5:

497befa222ad25e11d7f2297c7b42ae9

SHA-1:

dc57aa84dc608026c5d160463505dd9458675f5d

SHA-256:

ca7bbe7e3bfcabf0bddc5689ed8fb3aeaa7d9b504e4d6b799242cf53b56c5350

Scanner detections:

33 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements. Distributed through the Brightcircle investments brand.

Note:

Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is Porter Studio Plus.

Analysis date:

4/26/2024 7:07:57 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.Graftor.151676

824

Agnitum Outpost

PUA.Adwapper

7.1.1

AhnLab V3 Security

PUP/Win32.BHO

2014.09.19

Avira AntiVirus

ADWARE/CrossRider.Gen7

7.11.181.56

avast!

Win32:Malware-gen

2014.9-141030

AVG

Generic

2015.0.3306

Baidu Antivirus

PUA.Win32.CrossRider

4.0.3.141030

Bitdefender

Gen:Variant.Adware.Graftor.151676

1.0.20.1535

Comodo Security

ApplicUnwnt

19547

Dr.Web

DLOADER.Trojan

9.0.1.0303

Emsisoft Anti-Malware

Gen:Variant.Adware.Graftor.154021

8.14.10.30.10

ESET NOD32

Win32/Toolbar.CrossRider.BA (variant)

8.10620

Fortinet FortiGate

W32/GoogUpdate.BA!tr

10/30/2014

F-Prot

W32/A-ee826839

v6.4.7.1.166

F-Secure

Gen:Variant.Adware.Graftor.151676

11.2014-03-11_2

G Data

Win32.Adware.Crossrider

14.11.24

IKARUS anti.virus

AdWare.WebToolbar.CroRi

t3scan.1.7.8.0

K7 AntiVirus

Unwanted-Program

13.185.13866

Kaspersky

Trojan.Win32.GoogUpdate

14.0.0.3023

Malwarebytes

PUP.Optional.RadioCanyon.A

v2014.10.30.10

McAfee

Artemis!BF2789C2EB9B

5600.6958

MicroWorld eScan

Gen:Variant.Adware.Graftor.151676

15.0.0.921

NANO AntiVirus

Riskware.Win32.AdLoad.dcmlho

0.28.2.61721

Panda Antivirus

Trj/Chgt.F

14.11.03.11

Qihoo 360 Security

HEUR/QVM30.1.Malware.Gen

1.0.0.1015

Quick Heal

AdWare.NSIS.r6 (Not a Virus)

11.14.14.00

Reason Heuristics

PUP.CrossRider.BHO.Q

14.11.3.21

Rising Antivirus

PE:Malware.Obscure!1.9C59

23.00.65.141028

Sophos

Generic PUA EH

4.98

Trend Micro House Call

TROJ_GEN.F0C2H00IG14

7.2.307

Vba32 AntiVirus

AdWare.Adwapper

3.12.26.3

VIPRE Antivirus

Threat.4789396

34232

Zillya! Antivirus

Adware.Adwapper.Win32.80

2.0.0.1934

File size:

586.9 KB (600,992 bytes)

Product version:

1000.1000.1000.1000

Original file name:

Radio Canyon.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\radio canyon\radio canyon-bho.dll

Digital Signature

Signed by:

Porter Studio Plus

Authority:

COMODO CA Limited

Valid from:

10/20/2014 2:00:00 AM

Valid to:

10/21/2015 1:59:59 AM

Subject:

CN=Porter Studio Plus, O=Porter Studio Plus, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00B7BA41CFBA8D50AF9A2A64362C08FA91

File PE Metadata

Compilation timestamp:

10/29/2014 9:36:07 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:gJ/MXLqFZJqMRDTLxhpkPHq2Tpq19jQjx:gJ0uaMpHLCFTakjx

Entry address:

0x44574

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 8D, B2, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, B8, F4, 07, 10, E8, BD, 30, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 58, 69, 08, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 74, F5, 06, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

401 KB (410,624 bytes)

Internet Explorer BHO

Display name:

71c6c330e74701318a6f0adb73eaa5ae0060804

CLSID:

{11111111-1111-1111-1111-110611081104}

CLSID name:

Radio Canyon

The file radio canyon-bho.dll has been discovered within the following program.

Radio Canyon by Bright circle investments Ltd.

Radio Canyon (Porter Studio Plus) is an adware program (supported by various types of advertising) that is usually bundled by third party installers and download managers.

88% remove it

Remove radio canyon-bho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.