SavePass 1.1
What is SavePass 1.1?
SavePass 1.1 is software application developed by Morgan Enter Mode. It is most commonly found on computers running Windows 7 with nearly 61.41% of installations running this operating system. SavePass 1.1's installer is typically 12.00 MB in size and installs around 704 files. The most common release is 1.36.01.22 with 66.15% of all installations currently using this version.
SavePass 1.1 is most popular in the United States with 11.15% of installations residing in this country.
SavePass 1.1 adds 6 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.
About SavePass 1.1?
SavePass, developed by Brightcircle, is a browser extension designed to provide display advertising within the user's web browser experience. The extension showcases ads in the form of banners and contextual text-links, strategically placed within the white space areas of the HTML page or overlaying existing ads on the visited website. These advertisements commonly promote PC optimization utilities, bundled malware, and other forms of malvertising. SavePass is constructed using the CrossRider framework, ensuring its robust performance and compatibility with various web browsers.
Multiple virus scanners have detected malware in SavePass 1.1.
Software Behaviors
- Scheduled tasks:
-
- 26dd6979-8d64-4730-9d96-7deb2c10d974-10.exe is scheduled as a task named 'temp_26dd6979-8d64-4730-9d96-7deb2c10d974-10_user'.
- b1c53fee-8726-444e-88b0-ee36f5a8ba6e-10.exe is scheduled as a task named 'temp_b1c53fee-8726-444e-88b0-ee36f5a8ba6e-10_user'.
- d54ab9aa-c630-4be0-ab82-415d3adaaa4b-10.exe is scheduled as a task named 'd54ab9aa-c630-4be0-ab82-415d3adaaa4b-10_user'.
- 2baf08be-a43a-44ab-950f-a58cdf6142a1-6.exe is scheduled as a task named 'temp_2baf08be-a43a-44ab-950f-a58cdf6142a1-6'.
- 2baf08be-a43a-44ab-950f-a58cdf6142a1-10.exe is scheduled as a task named 'temp_2baf08be-a43a-44ab-950f-a58cdf6142a1-10_user'.
- 2baf08be-a43a-44ab-950f-a58cdf6142a1-1-6.exe is scheduled as a task named 'temp_2baf08be-a43a-44ab-950f-a58cdf6142a1-1-6'.
Startup Entries
- Startup tasks:
-
- abb3bee3-0cfe-42f4-bc0d-20164cc70f4d-7.exe is automatically launched at startup through a scheduled task named abb3bee3-0cfe-42f4-bc0d-20164cc70f4d-1.
- 7f75cb8c-a37f-48b2-99e3-0e9c6011327b-1-7.exe is automatically launched at startup through a scheduled task named 7f75cb8c-a37f-48b2-99e3-0e9c6011327b-7.
- 7f75cb8c-a37f-48b2-99e3-0e9c6011327b-10.exe is automatically launched at startup through a scheduled task named 7f75cb8c-a37f-48b2-99e3-0e9c6011327b-10_user.
- 988cc88a-23c4-45bb-8db9-777989a6658f-1-7.exe is automatically launched at startup through a scheduled task named 988cc88a-23c4-45bb-8db9-777989a6658f-7.
- 988cc88a-23c4-45bb-8db9-777989a6658f-10.exe is automatically launched at startup through a scheduled task named 988cc88a-23c4-45bb-8db9-777989a6658f-10_user.
- b1c53fee-8726-444e-88b0-ee36f5a8ba6e-1-7.exe is automatically launched at startup through a scheduled task named b1c53fee-8726-444e-88b0-ee36f5a8ba6e-7.
Software Details
- URL:
- –
- Support:
- –
- Installation path:
- C:\Program Files\savepass 1.1
- Uninstaller:
- C:\Program Files\SavePass 1.1\Uninstall.exe /fcp=1
- Size:
- 12.00 MB
- Language:
- English
SavePass 1.1 Executable Details
- Primary executable:
- utils.exe
- Name:
- SavePass 1.1
- Path:
- C:\Program Files\savepass 1.1\utils.exe
- MD5:
- f537709f5588f2dfb92f953233146615
- SHA-1:
- –
- SHA-256:
- –
| File Type | Filename | MD5 |
|---|---|---|
|
DLL
|
0900b6c72905788aca613f89fe739bd3 | |
|
EXE
|
ab91a7350a5fddcdf0a7b0c60e8e4e71 | |
|
DLL
|
5e8e81170731f5521bf540e5e374b011 | |
|
DLL
|
06bef001533cc9b2aee78e0315432f94 | |
|
EXE
|
utils.exe
Malware
|
f537709f5588f2dfb92f953233146615 |
|
DLL
|
054eb97126c57f5476abc3c6f8586eab | |
|
DLL
|
55bbde7f48a5ef7a8254bfeb3a5a39d7 | |
|
DLL
|
9161b2db6facc5aa59f5eae689ec05af | |
|
EXE
|
521de5d0d86e6fb3e01b1c6d0f264c6a | |
|
EXE
|
a1efeae0f73f32f6f7f49f6161340dc0 |