home

00000003

Digital Plugin S.l.

This is the Softpulse installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The file 00000003 by Digital Plugin S.l has been detected as adware by 28 anti-malware scanners. The program is a setup application that uses the Softpulse SoftwareBundler installer.
Publisher:
Digital Plugin S.l.  (signed and verified)

MD5:
dce3d38fb4d891eb71b4a92e30411ede

SHA-1:
c2919accd3459999e19d10a9f9b9967b32a6f981

SHA-256:
87838263e4283216235692d75a847c0b3e6563cb3cb7009b2329361f0cddfdaa

Scanner detections:
28 / 68

Status:
Adware

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
5/25/2024 7:56:20 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Zusy.102357
866

Agnitum Outpost
Riskware.Agent
7.1.1

AhnLab V3 Security
Adware/Win32.Agent
2014.09.22

Avira AntiVirus
TR/Dropper.Gen
7.11.30.172

avast!
Win32:SoftPulse-AH [PUP]
2014.9-140921

AVG
Win.Threat.High
2015.0.3344

Bitdefender
Gen:Variant.Adware.Zusy.102357
1.0.20.1320

Clam AntiVirus
Win.Adware.Agent-10436
0.98/19411

Dr.Web
Adware.Downware.5878
9.0.1.0264

Emsisoft Anti-Malware
Gen:Variant.Adware.Zusy.102357
8.14.09.21.06

ESET NOD32
Win32/SoftPulse.J potentially unwanted application
8.7.0.302.0

F-Prot
W32/A-6becd5b1
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.Zusy.102357
11.2014-21-09_1

G Data
Gen:Variant.Adware.Zusy.102357
14.9.24

herdProtect (fuzzy)
variant of setup.exe (Adware)
2014.12.4.2

IKARUS anti.virus
Trojan.Dropper
t3scan.1.7.8.0

K7 AntiVirus
Unwanted-Program
13.183.13432

Malwarebytes
PUP.Optional.DomaIQ
v2014.09.21.06

McAfee
SoftPulse
5600.7000

MicroWorld eScan
Gen:Variant.Adware.Zusy.102357
15.0.0.792

NANO AntiVirus
Trojan.Win32.Buzus.ddkefn
0.28.2.62151

Norman
Malware
11.20140921

Panda Antivirus
Trj/Genetic.gen
14.09.21.06

Reason Heuristics
PUP.DigitalPluginSl.I
14.9.21.18

Sophos
SoftPulse
4.98

Vba32 AntiVirus
Trojan.Buzus
3.12.26.3

VIPRE Antivirus
Threat.4783235
32938

Zillya! Antivirus
Trojan.Buzus.Win32.121291
2.0.0.1929

File size:
1.2 MB (1,232,104 bytes)

Bundler/Installer:
Softpulse SoftwareBundler

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\file system\004\t\00\00000003

Digital Signature
Signed by:
Digital Plugin S.l.

Authority:
VeriSign, Inc.

Valid from:
7/13/2014 8:00:00 PM

Valid to:
7/14/2015 7:59:59 PM

Subject:
CN=Digital Plugin S.l., O=Digital Plugin S.l., L=Guia de Isora, S=Santa Cruz de Tenerife, C=ES

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
229111B20CCF13394E8E6CA9EAB4121F

File PE Metadata
Compilation timestamp:
8/3/2014 2:00:53 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:3+si9G36xN9G36xtnMm4qu/5858PizfhUEza8Fgys7rW31JTPeTv0MSXwczvoECt:RH5qn4quRnwW8yNKnDXZvQ7

Entry address:
0x5CB0

Entry point:
E8, 0F, 20, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 8B, 45, 0C, 83, EC, 20, 56, 57, 6A, 08, 59, BE, 10, 20, 41, 00, 8D, 7D, E0, F3, A5, 8B, 4D, 08, 5F, 5E, 85, C0, 74, 0D, F6, 00, 10, 74, 08, 8B, 01, 8B, 40, FC, 8B, 40, 18, 89, 4D, F8, 89, 45, FC, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, AC, 10, 41, 00, C9, C2, 08, 00, 8B, 4D, F4, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, 4D, EC, 33, CD, E8, 37...
 
[+]

Entropy:
7.6965

Code size:
61.5 KB (62,976 bytes)

Remove 00000003 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.