home

radio canyon-buttonutil.exe

Crossrider Advanced Technologies

Part of the Crossrider framework, a web browser extension that will deliver advertisements such as coupons, price-comparisons, display media, affiliate links, banners, popups/popunders and other links. The application radio canyon-buttonutil.exe by Crossrider Advanced Technologies has been detected as adware by 41 anti-malware scanners. This file is typically installed with the program Radio Canyon by Bright circle investments Ltd. which is a potentially unwanted software program. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Publisher:
Radio Canyon  (signed by Crossrider Advanced Technologies)

Product:
Radio Canyon

Description:
Radio Canyon exe

Version:
1000.1000.1000.1000

MD5:
b7b37f05df6e89fa1c314bf57dda38ac

SHA-1:
0a0c571372591d7f7109e522ed49d2ed19693dc4

SHA-256:
483bf26e689297b8d4f38583f0565ba386ec697d6132d8874c3229946fdc2192

Scanner detections:
41 / 68

Status:
Adware

Explanation:
Part of the Crossrider toolbar platform. It will download and install new code and Javascript updates for the extension.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is Crossrider Advanced Technologies.

Analysis date:
4/25/2024 9:33:43 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Application.Heur.su1@me4SFFei
369

Agnitum Outpost
PUA.Agent
7.1.1

AhnLab V3 Security
PUP/Win32.CrossRider
2015.10.08

Avira AntiVirus
ADWARE/CrossRider.Gen
8.3.2.2

avast!
Win32:Crossrider-AI [PUP]
2014.9-160131

AVG
Crossrider
2017.0.2847

Baidu Antivirus
Adware.Win32.CrossRider
4.0.3.16131

Bitdefender
Gen:Application.Heur.su1@me4SFFei
1.0.20.155

Bkav FE
W32.HfsAdware
1.3.0.7237

Clam AntiVirus
Win.Adware.Crossrider-87
0.98/21411

Comodo Security
Application.Win32.CrossRider.BMK
23378

Dr.Web
Trojan.Crossrider1.26410
9.0.1.031

Emsisoft Anti-Malware
Gen:Application.Heur.su1@mmNMXjbi
8.16.01.31.05

ESET NOD32
Win32/Toolbar.CrossRider.BO potentially unwanted (variant)
10.12377

Fortinet FortiGate
Adware/Agent
1/31/2016

F-Prot
W32/S-776bb2b1
v6.4.7.1.166

F-Secure
Gen:Application.Heur.su1@me4SFFei
11.2016-31-01_1

G Data
Gen:Application.Heur.su1@me4SFFei
16.1.25

IKARUS anti.virus
not-a-virus:AdWare.Adwapper
t3scan.1.7.8.0

K7 AntiVirus
Adware
13.210.17471

Kaspersky
not-a-virus:AdWare.Win32.Agent
14.0.0.731

Malwarebytes
PUP.Optional.RadioCanyon
v2016.01.31.05

McAfee
Artemis!9F173264BF1C
5600.6503

Microsoft Security Essentials
Threat.Undefined
1.179.1221.0

MicroWorld eScan
Gen:Application.Heur.su1@me4SFFei
17.0.0.93

NANO AntiVirus
Trojan.Win32.Crossrider1.dqzolx
0.30.26.3947

Norman
Gen:Application.Heur.su1@kmNMXjbi
11.20160131

nProtect
Virus/W32.SpyEye
14.07.27.01

Panda Antivirus
Trj/Genetic.gen
16.01.31.05

Qihoo 360 Security
Win32/Virus.Adware.970
1.0.0.1015

Quick Heal
PUA.Crossrider.Gen
1.16.14.00

Reason Heuristics
Adware.Crossrider.CrossriderAdvancedTechnologies (M)
16.1.31.17

Rising Antivirus
PE:Malware.Obscure!1.9C59[F1]
23.00.65.16129

Sophos
Generic PUA JM (PUA)
4.98

SUPERAntiSpyware
PUP.RadioCanyon/Variant
9352

Total Defense
Heur/TrojanHorse.ZCJY!suspicious
37.1.62.1

Trend Micro House Call
Suspicious_GEN.F47V1127
7.2.31

Trend Micro
TROJ_GEN.R02KC0EH715
10.465.31

Vba32 AntiVirus
Trojan.GoogUpdate
3.12.26.4

VIPRE Antivirus
Crossrider
44376

Zillya! Antivirus
Trojan.GoogUpdate.Win32.4458
2.0.0.2435

File size:
305.2 KB (312,536 bytes)

Product version:
1000.1000.1000.1000

Copyright:
Copyright 2011

Original file name:
Radio Canyon.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\radio canyon\radio canyon-buttonutil.exe

Digital Signature
Signed by:
Crossrider Advanced Technologies

Authority:
COMODO CA Limited

Valid from:
9/24/2012 7:00:00 AM

Valid to:
9/25/2015 6:59:59 AM

Subject:
CN=Crossrider Advanced Technologies, O=Crossrider Advanced Technologies, STREET=40 Lilienblum St, L=Tel-Aviv, S=Israel, PostalCode=65133, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B9966EA31AF5750F30968D041D15669B

File PE Metadata
Compilation timestamp:
11/6/2014 3:34:22 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:NY1NaNZwFuAWXE5qOaDx2p1qoHNbmJqv3KBUDhQ9dhCHWIe6a+zacxHV7Awee:NSNaDwFwXEYx2fHNSJqPP8hk86aj2kI

Entry address:
0x21D55

Entry point:
E8, 9C, 93, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 70, 65, 44, 00, E8, 35, 27, 00, 00, E8, 4B, 16, 00, 00, 0F, B7, F0, 6A, 02, E8, 2F, 93, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 3F, 2D, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
225.5 KB (230,912 bytes)

The file radio canyon-buttonutil.exe has been discovered within the following program.

Radio Canyon  by Bright circle investments Ltd.
Radio Canyon (Porter Studio Plus) is an adware program (supported by various types of advertising) that is usually bundled by third party installers and download managers.
88% remove it
 
Powered by Should I Remove It?

Remove radio canyon-buttonutil.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.