home

thetorntv v10-nova.dll

HARASAN PRAPAPON

Part of the Crossrider framework, a web browser extension that will deliver advertisements such as coupons, price-comparisons, display media, affiliate links, banners, popups/popunders and other links. The module thetorntv v10-nova.dll by HARASAN PRAPAPON has been detected as adware by 22 anti-malware scanners.
Publisher:
HARASAN PRAPAPON  (signed and verified)

MD5:
421574dd4fa2837d294d0d05e7332f0d

SHA-1:
8f15586b3d3a8a95acf104858aef3326f51310d8

SHA-256:
1e897975c7ddfdedec25871d44640a41f549022301c444bfedab91c97a327f05

Scanner detections:
22 / 68

Status:
Adware

Explanation:
May modify the web browser's settings including changing the homepage and search provider in addition to delivering ads (by injecting banner and text-links directly in the webpage).

Analysis date:
4/19/2024 2:18:14 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Generic.989720
896

Agnitum Outpost
PUA.AdLoad
7.1.1

Avira AntiVirus
Adware/Agent.130432
7.11.164.128

AVG
Generic
2015.0.3412

Baidu Antivirus
Adware.Win32.CrossRider
4.0.3.14822

Bitdefender
Adware.Generic.989720
1.0.20.1170

Emsisoft Anti-Malware
Adware.Generic.989720
8.14.08.22.06

ESET NOD32
probably Win32/Toolbar.CrossRider.AI potentially unwanted application
7.0.302.0

Fortinet FortiGate
Adware/Adload
8/22/2014

F-Secure
Adware.Generic.989720
11.2014-22-08_6

G Data
Adware.Generic.989720
14.8.24

K7 AntiVirus
Trojan
13.181.12872

Kaspersky
not-a-virus:AdWare.Win32.AdLoad
14.0.0.3366

McAfee
Artemis!BD23E550DA58
5600.7030

MicroWorld eScan
Adware.Generic.989720
15.0.0.702

Panda Antivirus
Trj/Genetic.gen
14.08.22.06

Reason Heuristics
PUP.HARASANPRAPAPON.S
14.7.16.5

Rising Antivirus
PE:Malware.Bundlore!6.180F
23.00.65.14820

Sophos
Generic PUA DG
4.98

Trend Micro House Call
TROJ_GEN.R0C1H07GC14
7.2.234

Vba32 AntiVirus
AdWare.AdLoad
3.12.26.3

VIPRE Antivirus
Threat.4783938
31208

File size:
125.9 KB (128,936 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\thetorntv v10\thetorntv v10-nova.dll

Digital Signature
Signed by:
HARASAN PRAPAPON

Authority:
Thawte, Inc.

Valid from:
5/7/2014 2:00:00 AM

Valid to:
5/8/2015 1:59:59 AM

Subject:
CN=HARASAN PRAPAPON, OU=Individual Developer, O=No Organization Affiliation, L=Rawai, S=Phuket, C=TH

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7D7E733EBA181BED3F1CA7001FFD54FD

File PE Metadata
Compilation timestamp:
7/15/2014 12:03:32 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1536:9WM+M9SPXMHA9IGTotExFU5JZkmE0++Zc840GsWjcdovTDBd54h:9WhMUkg94tbsB+h9povTDBd54h

Entry address:
0x60B8

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 8D, 38, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, A8, 9A, 01, 10, E8, D9, 14, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 4C, C2, 01, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 50, 50, 01, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Entropy:
6.1152

Developed / compiled with:
Microsoft Visual C++

Code size:
72.5 KB (74,240 bytes)

Remove thetorntv v10-nova.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.