home

uninstaller.exe

Couponarific

This is the instaler for an an Adpeak program that shows ads in the browser without providing information about the ad's origin. Ads are injected as banners or text-links in random web pages. The application uninstaller.exe by Couponarific has been detected as adware by 8 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program couponarific by couponarific. This file is typically installed with the program couponarific by CouponARific which is a potentially unwanted software program.
Publisher:
Couponarific  (signed and verified)

MD5:
bdc126f127a35c4cf179da570f6a851f

SHA-1:
eb892232857aca6d583ba30ff7e0b7f57ee918db

SHA-256:
03eaab6a6b4b5f06c0726c3735e2584766f72cc0cf3a2247a29e44c3fc4488c5

Scanner detections:
8 / 68

Status:
Adware

Explanation:
Injects advertisements in the web browser in the form or banner ads and popups.

Analysis date:
12/25/2024 1:06:26 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.Adpeak
2015.03.30

AVG
Generic
2016.0.3008

Bkav FE
W32.HfsAdware
1.3.0.6379

Kaspersky
not-a-virus:AdWare.Win32.AdPeak
14.0.0.1536

McAfee
Artemis!BDC126F127A3
5600.6664

Panda Antivirus
Generic Suspicious
15.08.23.06

Reason Heuristics
PUP.Adpeak.Couponarific.Installer (M)
15.8.23.18

Trend Micro House Call
TROJ_GEN.R0C1H07L814
7.2.235

File size:
103.4 KB (105,872 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\49c6e1a8-76b7-4ff2-a3b1-e61fa591b55c\uninstaller.exe

Digital Signature
Signed by:
Couponarific

Authority:
GlobalSign nv-sa

Valid from:
10/6/2014 5:12:43 PM

Valid to:
10/7/2015 5:12:43 PM

Subject:
E=support@couponarific.com, CN=Couponarific, O=Couponarific, L=Seattle, S=WA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D5217FDB68336D578AC0747743835652

File PE Metadata
Compilation timestamp:
10/7/2014 1:40:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:idxNE+Hb+eyz9zIa3/aEEk5mYzuvsozClfjJ:iW+7+eMF/aEEk5Vzuvjz+l

Entry address:
0x335A

Entry point:
81, EC, D8, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 30, 92, 40, 00, 89, 6C, 24, 14, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, BC, 70, 40, 00, 55, FF, 15, AC, 72, 40, 00, 6A, 09, A3, B8, 92, 42, 00, E8, 15, 2F, 00, 00, A3, 04, 92, 42, 00, 55, 8D, 44, 24, 38, 68, B4, 02, 00, 00, 50, 55, 68, A8, 06, 42, 00, FF, 15, 7C, 71, 40, 00, 68, 7C, 93, 40, 00, 68, 00, 82, 42, 00, E8, 80, 2B, 00, 00, FF, 15, 34, 71, 40, 00, BB, 00, 40, 43, 00, 50, 53, E8, 6E, 2B, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
24 KB (24,576 bytes)

Program Uninstaller
Program name:
couponarific

Display publisher:
couponarific

Display version:
2.0.1

Uninstall string:
C:\Program Files\49C6E1A8-76B7-4FF2-A3B1-E61FA591B55C\uninstaller.exe -source="49C6E1A8-76B7-4FF2-A3B1-E61FA591B55C" -clean="1"


The file uninstaller.exe has been discovered within the following program.

couponarific  by CouponARific
couponarific is a potentially unwanted adware program that injects ads into the user's browser. This includes inserting into web pages or displaying ads over parts of existing web page advertisements, banners, coupons or text links that would not otherwise appear.
83% remove it
 
Powered by Should I Remove It?

Remove uninstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.