driver-detective-6-6-es.exe

Smart Secure Software S.l.

This is the Softpulse installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application driver-detective-6-6-es.exe by Smart Secure Software S.l has been detected as adware by 20 anti-malware scanners. The program is a setup application that uses the Softpulse SoftwareBundler installer. The file has been seen being downloaded from ttb.dldsoftpro.com.
Publisher:
Smart Secure Software S.l.  (signed and verified)

MD5:
ac48d51480913a7c03f95d7c7fdb3dac

SHA-1:
85766199a8feb2d10bbdad79e8478add6be7b257

SHA-256:
569785f00d26cc1e51d62b4d2cf7f2ca7213dafa03a532126bb5f0f2172cfa80

Scanner detections:
20 / 68

Status:
Adware

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/25/2024 11:02:40 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Strictor.61140
904

Agnitum Outpost
Riskware.Agent
7.1.1

AhnLab V3 Security
PUP/Win32.DomaIQ
2014.08.15

Avira AntiVirus
TR/Dropper.Gen
7.11.30.172

avast!
Win32:SoftPulse-W [PUP]
2014.9-140814

AVG
Found Win32/DH{gRJ UIEHeVRPFVGBFYEJHFOBE0GBDw}
2015.0.3382

Bitdefender
Gen:Variant.Adware.Strictor.61140
1.0.20.1130

Dr.Web
Trojan.DownLoader11.27075
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Strictor.61140
9.0.0.4157

ESET NOD32
Win32/SoftPulse (variant)
8.10245

F-Secure
Gen:Variant.Adware.Strictor.61140
11.2014-14-08_5

G Data
Gen:Variant.Adware.Strictor.61140
14.8.24

herdProtect (fuzzy)
2014.10.30.4

K7 AntiVirus
Unwanted-Program
13.183.13029

McAfee
Socrydo
5600.7038

MicroWorld eScan
Gen:Variant.Adware.Strictor.61140
15.0.0.678

Panda Antivirus
Trj/Genetic.gen
14.08.14.06

Reason Heuristics
PUP.SmartSecureSoftwareSl.X
14.8.14.12

Sophos
SoftPulse
4.98

VIPRE Antivirus
Threat.4783235
31208

File size:
1.1 MB (1,103,088 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Softpulse SoftwareBundler

Common path:
C:\users\{user}\downloads\driver-detective-6-6-es.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
6/16/2014 7:00:00 PM

Valid to:
6/17/2015 6:59:59 PM

Subject:
CN=Smart Secure Software S.l., O=Smart Secure Software S.l., L=Adeje, S=Santa Cruz de Tenerife, C=ES

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
47353B4EEC0D902A135E20BEE1A66817

File PE Metadata
Compilation timestamp:
8/12/2014 7:37:53 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:lGIbpkdDnlQLnnIT/Jr6K9NebA4sztscTNGaN:pwLlQLnIrJr6K9NebAvH3

Entry address:
0x5D80

Entry point:
E8, 5F, 20, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 8B, 45, 0C, 83, EC, 20, 56, 57, 6A, 08, 59, BE, 10, 20, 41, 00, 8D, 7D, E0, F3, A5, 8B, 4D, 08, 5F, 5E, 85, C0, 74, 0D, F6, 00, 10, 74, 08, 8B, 01, 8B, 40, FC, 8B, 40, 18, 89, 4D, F8, 89, 45, FC, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, B0, 10, 41, 00, C9, C2, 08, 00, 8B, 4D, F4, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, 4D, F0, 33, CD, E8, 30...
 
[+]

Entropy:
7.8092  (probably packed)

Code size:
61.5 KB (62,976 bytes)

The file driver-detective-6-6-es.exe has been seen being distributed by the following URL.

Remove driver-detective-6-6-es.exe - Powered by Reason Core Security