» thehdvid-codec v10-bg.exe
Overview
Analysis
File Details
Programs (1)

thehdvid-codec v10-bg.exe

TheHDvid-Codec V10

HARASAN PRAPAPON

Part of the Crossrider framework, a web browser extension that will deliver advertisements such as coupons, price-comparisons, display media, affiliate links, banners, popups/popunders and other links. The application thehdvid-codec v10-bg.exe, “TheHDvid-Codec V10 exe” by HARASAN PRAPAPON has been detected as adware by 39 anti-malware scanners. This file is typically installed with the program TheHDvid-Codec V10 by Joseph CM which is a potentially unwanted software program. Part of the Corssrider web browser platform, the BG executable is a background process that manage various function of the installed extensions in user's browser including managing installation, updates and remote code downloads.

File name:

Publisher:

home (signed by HARASAN PRAPAPON)

Product:

TheHDvid-Codec V10

Description:

TheHDvid-Codec V10 exe

Version:

1000.1000.1000.1000

MD5:

403b85bd3dce69cef88fd382fbdec8e1

SHA-1:

6787308926af9db77d5b596de6c2a76630753102

SHA-256:

901adcf5f11871570fdebcb84ce98c3ad8d1b48df7c363381d3d605d8da02c3a

Scanner detections:

39 / 68

Status:

Adware

Explanation:

The software may change the browser's home page and search provider settings as well as display advertisements.

Note:

Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is HARASAN PRAPAPON.

Analysis date:

4/25/2024 9:03:26 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Win32.Sality.3

922

Agnitum Outpost

Win32.Sality.BL

7.1.1

AhnLab V3 Security

PUP/Win32.MulDrop

2014.07.26

Avira AntiVirus

ADWARE/CrossRider.Gen2

7.11.163.246

avast!

Win32:Adware-gen [Adw]

2014.9-140727

AVG

Generic

2015.0.3402

Baidu Antivirus

Adware.Win32.CrossRider

4.0.3.14727

Bitdefender

Win32.Sality.3

1.0.20.1040

Bkav FE

W32.Sality.PE

1.3.0.4959

Comodo Security

Virus.Win32.Sality.Gen

18279

Dr.Web

Adware.Toolbar.234

9.0.1.0208

Emsisoft Anti-Malware

Win32.Sality

8.14.07.27.03

ESET NOD32

Win32/Toolbar.CrossRider.AL potentially unwanted application

7.0.302.0

Fortinet FortiGate

Riskware/Toolbar_CrossRider

7/27/2014

F-Prot

W32/A-eb9ef301

v6.4.7.1.166

F-Secure

Gen:Variant.Adware.Kazy.374109

11.2014-27-07_1

G Data

Win32.Sality

14.7.24

IKARUS anti.virus

not-a-virus:WebToolbar.CrossRider

t3scan.1.6.1.0

K7 AntiVirus

Virus

13.177.12095

Kaspersky

Virus.Win32.Sality

14.0.0.3497

Malwarebytes

PUP.Optional.HDVid.A

v2014.07.25.12

McAfee

Artemis!87DEE69240C5

5600.7056

Microsoft Security Essentials

Threat.Undefined

1.173.2171.0

MicroWorld eScan

Win32.Sality.3

15.0.0.624

NANO AntiVirus

Virus.Win32.Sality.beygb

0.28.0.59911

Norman

Sality.ZHB

11.20140727

Panda Antivirus

PUP/MultiToolbar.A

14.07.25.12

Qihoo 360 Security

Malware.QVM10.Gen

1.0.0.1015

Quick Heal

W32.Sality.U

7.14.14.00

Reason Heuristics

PUP.Crossrider.HARASANPRAPAPON.V

14.7.25.12

Rising Antivirus

PE:Malware.Obscure!1.9C59

23.00.65.14723

Sophos

AppRider

4.98

Total Defense

Win32/Sality.AA

37.0.10939

Trend Micro House Call

TROJ_GEN.F47V0307

7.2.208

Trend Micro

PE_SALITY.RL

10.465.27

Vba32 AntiVirus

Virus.Win32.Sality.bakc

3.12.26.0

VIPRE Antivirus

Threat.4789396

31208

ViRobot

Win32.Sality.N

2011.4.7.4223

Zillya! Antivirus

Virus.Sality.Win32.20

2.0.0.1789

File size:

684.9 KB (701,352 bytes)

Product version:

1000.1000.1000.1000

Original file name:

TheHDvid-Codec V10.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\thehdvid-codec v10\thehdvid-codec v10-bg.exe

Digital Signature

Signed by:

HARASAN PRAPAPON

Authority:

Thawte, Inc.

Valid from:

5/6/2014 6:00:00 PM

Valid to:

5/7/2015 5:59:59 PM

Subject:

CN=HARASAN PRAPAPON, OU=Individual Developer, O=No Organization Affiliation, L=Rawai, S=Phuket, C=TH

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7D7E733EBA181BED3F1CA7001FFD54FD

File PE Metadata

Compilation timestamp:

7/23/2014 4:05:28 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:w1o1uDAcq5t2qrll5G4NN+4COot00uT6sa:w1o1uDAc22q5lkW40jTRa

Entry address:

0x6178D

Entry point:

E8, 9A, CD, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 20, 37, 4A, 00, E8, 4D, 49, 00, 00, E8, C1, 1C, 00, 00, 0F, B7, F0, 6A, 02, E8, 2D, CD, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 6B, 51, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8... 
[+]

Entropy:

6.4755

Code size:

546.5 KB (559,616 bytes)

The file thehdvid-codec v10-bg.exe has been discovered within the following program.

TheHDvid-Codec V10 by Joseph CM

TheHDvid-Codec is an advertising supported (adware) extension that runs in the context of the user's web browser as well as a process in the background.

crossrider.com/install/61180-thehdvid-codec-v10

83% remove it

Remove thehdvid-codec v10-bg.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.