The application 4d830a52-bb28-4e07-a995-0f35f52cea89-1-7.exe, “CinemaP-1.8cV09.03 exe” has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. While running, it connects to the Internet address ip-184-168-221-47.ip.secureserver.net on port 80 using the HTTP protocol.