home

fcb fan alert.exe

Crossrider Advanced Technologies

Part of the Crossrider framework, a web browser extension that will deliver advertisements such as coupons, price-comparisons, display media, affiliate links, banners, popups/popunders and other links. The application fcb fan alert.exe by Crossrider Advanced Technologies has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Publisher:
Crossrider Advanced Technologies  (signed and verified)

MD5:
5597cc193ac7f1ca6fd1482e612f83e5

SHA-1:
51868257c1473fc599e5e41fe2f63b1d6b6896ce

SHA-256:
d448a2db98c58cb259fdb3e604064027ceed69b6bc0d89e2419370f22d45255b

Scanner detections:
1 / 68

Status:
Adware

Explanation:
The software may change the browser's home page and search provider settings as well as display advertisements.

Analysis date:
11/23/2024 7:45:50 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Crossrider (M)
17.3.14.1

File size:
24 KB (24,528 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\fcb fan alert\fcb fan alert.exe

Digital Signature
Signed by:
Crossrider Advanced Technologies

Authority:
COMODO CA Limited

Valid from:
9/24/2012 2:00:00 AM

Valid to:
9/25/2015 1:59:59 AM

Subject:
CN=Crossrider Advanced Technologies, O=Crossrider Advanced Technologies, STREET=40 Lilienblum St, L=Tel-Aviv, S=Israel, PostalCode=65133, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B9966EA31AF5750F30968D041D15669B

File PE Metadata
Compilation timestamp:
8/15/2013 9:53:02 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x3350

Entry point:
E8, AB, 05, 00, 00, E9, 24, FD, FF, FF, FF, 25, 14, 41, 40, 00, FF, 25, 10, 41, 40, 00, 6A, 14, 68, A8, 48, 40, 00, E8, AE, 04, 00, 00, FF, 35, 88, 64, 40, 00, 8B, 35, 60, 40, 40, 00, FF, D6, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, B4, 40, 40, 00, 59, EB, 64, 6A, 08, E8, 0D, 06, 00, 00, 59, 83, 65, FC, 00, FF, 35, 88, 64, 40, 00, FF, D6, 89, 45, E4, FF, 35, 84, 64, 40, 00, FF, D6, 89, 45, E0, 8D, 45, E0, 50, 8D, 45, E4, 50, FF, 75, 08, 8B, 35, 64, 40, 40, 00, FF, D6, 50, E8, D3, 05, 00, 00, 83...
 
[+]

Code size:
11 KB (11,264 bytes)

Remove fcb fan alert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.