home

radio canyon-buttonutil.exe

Crossrider Advanced Technologies

Part of the Crossrider framework, a web browser extension that will deliver advertisements such as coupons, price-comparisons, display media, affiliate links, banners, popups/popunders and other links. The application radio canyon-buttonutil.exe by Crossrider Advanced Technologies has been detected as adware by 41 anti-malware scanners. This file is typically installed with the program Radio Canyon by Bright circle investments Ltd. which is a potentially unwanted software program. It is built using the Crossrider cross-browser extension platform. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Publisher:
Radio Canyon  (signed by Crossrider Advanced Technologies)

Product:
Radio Canyon

Description:
Radio Canyon exe

Version:
1000.1000.1000.1000

MD5:
df2420533a5a26e52055a3ae5b3fc5ed

SHA-1:
7ee9d33c7edb12f23cf12bc95dd459d347d967c9

SHA-256:
45ad3ceff6272b6e5c6deea8131a47e99b6edb8d13939afe05b9b1d3acd7ea43

Scanner detections:
41 / 68

Status:
Adware

Explanation:
Part of the Crossrider toolbar platform. It will download and install new code and Javascript updates for the extension.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is Crossrider Advanced Technologies.

Analysis date:
5/4/2024 1:45:56 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Application.Heur.su1@me4SFFei
366

Agnitum Outpost
PUA.Agent
7.1.1

AhnLab V3 Security
PUP/Win32.CrossRider
2015.10.08

Avira AntiVirus
ADWARE/CrossRider.Gen
8.3.2.2

avast!
Win32:Crossrider-AI [PUP]
2014.9-160204

AVG
Crossrider
2017.0.2844

Baidu Antivirus
Adware.Win32.CrossRider
4.0.3.1624

Bitdefender
Gen:Application.Heur.su1@me4SFFei
1.0.20.175

Bkav FE
W32.HfsAdware
1.3.0.7237

Clam AntiVirus
Win.Adware.Crossrider-87
0.98/21411

Comodo Security
Application.Win32.CrossRider.BMK
23378

Dr.Web
Trojan.Crossrider1.26410
9.0.1.035

Emsisoft Anti-Malware
Gen:Application.Heur.su1@mmNMXjbi
8.16.02.04.07

ESET NOD32
Win32/Toolbar.CrossRider.BO potentially unwanted (variant)
10.12377

Fortinet FortiGate
Adware/Agent
2/4/2016

F-Prot
W32/S-776bb2b1
v6.4.7.1.166

F-Secure
Gen:Application.Heur.su1@me4SFFei
11.2016-04-02_5

G Data
Gen:Application.Heur.su1@me4SFFei
16.2.25

IKARUS anti.virus
not-a-virus:AdWare.Adwapper
t3scan.1.7.8.0

K7 AntiVirus
Adware
13.210.17471

Kaspersky
not-a-virus:AdWare.Win32.Agent
14.0.0.713

Malwarebytes
PUP.Optional.RadioCanyon
v2016.02.04.07

McAfee
Artemis!9F173264BF1C
5600.6500

Microsoft Security Essentials
Threat.Undefined
1.179.1221.0

MicroWorld eScan
Gen:Application.Heur.su1@me4SFFei
17.0.0.105

NANO AntiVirus
Trojan.Win32.Crossrider1.dqzolx
0.30.26.3947

Norman
Gen:Application.Heur.su1@kmNMXjbi
11.20160204

nProtect
Virus/W32.SpyEye
14.07.27.01

Panda Antivirus
Trj/Genetic.gen
16.02.04.07

Qihoo 360 Security
Win32/Virus.Adware.970
1.0.0.1015

Quick Heal
PUA.Crossrider.Gen
2.16.14.00

Reason Heuristics
Adware.Crossrider.CrossriderAdvancedTechnologies (M)
16.2.4.7

Rising Antivirus
PE:Malware.Obscure!1.9C59[F1]
23.00.65.16202

Sophos
Generic PUA JM (PUA)
4.98

SUPERAntiSpyware
PUP.RadioCanyon/Variant
9344

Total Defense
Heur/TrojanHorse.ZCJY!suspicious
37.1.62.1

Trend Micro House Call
Suspicious_GEN.F47V1127
7.2.35

Trend Micro
TROJ_GEN.R02KC0EH715
10.465.04

Vba32 AntiVirus
Trojan.GoogUpdate
3.12.26.4

VIPRE Antivirus
Crossrider
44376

Zillya! Antivirus
Trojan.GoogUpdate.Win32.4458
2.0.0.2435

File size:
303.2 KB (310,488 bytes)

Product version:
1000.1000.1000.1000

Copyright:
Copyright 2011

Original file name:
Radio Canyon.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\radio canyon\radio canyon-buttonutil.exe

Digital Signature
Signed by:
Crossrider Advanced Technologies

Authority:
COMODO CA Limited

Valid from:
9/24/2012 3:00:00 AM

Valid to:
9/25/2015 2:59:59 AM

Subject:
CN=Crossrider Advanced Technologies, O=Crossrider Advanced Technologies, STREET=40 Lilienblum St, L=Tel-Aviv, S=Israel, PostalCode=65133, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B9966EA31AF5750F30968D041D15669B

File PE Metadata
Compilation timestamp:
11/4/2014 11:37:06 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:wr2zqVq4OCkNnvlHppRGn6Djpf00LLtobmV0YMYEb63bc+qD9Ubu7B+EKwX9x7Ve:wr2O0kgjvjd0Mtn0YVdtaHBrg5

Entry address:
0x20A95

Entry point:
E8, 9C, 93, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 58, 56, 44, 00, E8, 35, 27, 00, 00, E8, 4B, 16, 00, 00, 0F, B7, F0, 6A, 02, E8, 2F, 93, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 3F, 2D, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.3873

Code size:
223.5 KB (228,864 bytes)

The file radio canyon-buttonutil.exe has been discovered within the following program.

Radio Canyon  by Bright circle investments Ltd.
Radio Canyon (Porter Studio Plus) is an adware program (supported by various types of advertising) that is usually bundled by third party installers and download managers.
88% remove it
 
Powered by Should I Remove It?

Remove radio canyon-buttonutil.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.