home

uninstall.exe

Supreme Savings

Innovative Apps

This is the installer application for a 50onRed advertising supported software package (displays ads in the browser and may hijack the home and search pages of the web browser). The application uninstall.exe, “Supreme Savings Installer” has been detected as adware by 10 anti-malware scanners. The program is a setup application that uses the Nullsoft Install System installer, however the file is not signed with an authenticode signature from a trusted source. This is the uninstaller utility registered in the Windows Control Panel for the program Supreme Savings by Innovative Apps. It is built using the Crossrider cross-browser extension platform. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Publisher:
Innovative Apps

Product:
Supreme Savings

Description:
Supreme Savings Installer

Version:
1.26.153.3

MD5:
15a7aef3b668a5dcd3e90c2b72bfc5ac

SHA-1:
875e514de6ea21b4f246b99d94e65fd0dd9926c4

SHA-256:
594e6b67ea19c275027dda6031c39cebc913b726be53b432abca2054d89db33b

Scanner detections:
10 / 68

Status:
Adware

Explanation:
This is part of the Crossrider Internet browser extension framework which may modify the user's web browser settings including changing the home and search pages.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application.

Analysis date:
4/25/2024 12:44:42 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Crossrider-C [PUP]
2014.9-140418

Baidu Antivirus
Trojan.Packed.Win32.ScrambleWrapper
4.0.3.14418

Bkav FE
HW32.CDB
1.3.0.4246

Dr.Web
Adware.Plugin.22
9.0.1.0108

ESET NOD32
Win32/Packed.ScrambleWrapper
8.8844

McAfee
Artemis!15A7AEF3B668
5600.7156

Reason Heuristics
PUP.Installer.InnovativeApps.J
14.8.13.21

Sophos
Generic PUA EL
4.93

Trend Micro House Call
TROJ_GEN.F47V0409
7.2.108

VIPRE Antivirus
GamePlayLabs
21832

File size:
1.2 MB (1,251,632 bytes)

Copyright:
Copyright Innovative Apps

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Language:
English (United States)

Common path:
C:\Program Files\supreme savings\uninstall.exe

File PE Metadata
Compilation timestamp:
1/5/2010 7:09:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
24576:vTqGCAPAtJKd+O6VvKNo/8QR1YF94snJ8VmiA1wvqcBAb8c48CH349ZQc:bGAPRSVvsavWmxUtXWAwP8CovQc

Entry address:
0x4044

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, E8, 97, 52, 00, 00, C7, 04, 24, 01, 80, 00, 00, E8, 43, 4F, 00, 00, 56, C7, 04, 24, 00, 00, 00, 00, E8, A6, 52, 00, 00, A3, 88, 5C, 42, 00, 53, C7, 04, 24, 08, 00, 00, 00, E8, 26, 32, 00, 00, A3, 38, 5D, 42, 00, 8D, 85, 84, FE, FF, FF, 51, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, A4, B2, 40, 00, E8, D0, 51, 00, 00, 83, EC, 14, C7, 44, 24, 04, A5, B2, 40, 00, C7, 04, 24, 68, 5D...
 
[+]

Entropy:
7.9797  (probably packed)

Code size:
33 KB (33,792 bytes)

Program Uninstaller
Program name:
Supreme Savings

Display publisher:
Innovative Apps

Display version:
1.26.153.3

Uninstall string:
C:\Program Files\Supreme Savings\Uninstall.exe


Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.