magnoplayer.exe

App Secure LLC

This is the Softpulse installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application magnoplayer.exe by App Secure has been detected as adware by 18 anti-malware scanners. The program is a setup application that uses the Softpulse SoftwareBundler installer.
Publisher:
App Secure LLC  (signed and verified)

MD5:
8067b9e08801b54674b46b59da832b7a

SHA-1:
57091c855a853180b23e7ade0412a783a1900d4d

SHA-256:
1fba5e9fdacbd4c776134a97670b0730a8a300f9f4932c9e86de8d592e20740c

Scanner detections:
18 / 68

Status:
Adware

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/25/2024 6:09:28 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.SoftPulse.9
602

AhnLab V3 Security
PUP/Win32.SoftPulse
2015.03.06

Avira AntiVirus
PUA/Softpulse.Gen
7.11.214.34

avast!
Win32:SoftPulse-GZ [PUP]
2014.9-150612

AVG
Generic
2016.0.3179

Bkav FE
W32.HfsAdware
1.3.0.6379

Dr.Web
Trojan.Domaiq.175
9.0.1.064

Emsisoft Anti-Malware
Gen:Variant.Adware.SoftPulse
8.15.06.12.02

ESET NOD32
Win32/SoftPulse.X potentially unwanted application
7.0.302.0

F-Secure
Gen:Variant.Adware.SoftPulse
11.2015-12-06_6

Kaspersky
not-a-virus:Downloader.Win32.DriverUpd
14.0.0.2390

Malwarebytes
PUP.Optional.DigitalPlugin.C
v2015.03.05.10

MicroWorld eScan
Gen:Variant.Adware.SoftPulse.9
16.0.0.489

NANO AntiVirus
Trojan.Win32.DriverUpd.dojhbs
0.30.0.296

Reason Heuristics
PUP.Bundler.Softpulse
15.3.5.22

VIPRE Antivirus
Threat.4150696
38552

Zillya! Antivirus
Downloader.DriverUpd.Win32.148
2.0.0.2089

File size:
472.4 KB (483,784 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Softpulse SoftwareBundler

Common path:
C:\users\{user}\downloads\magnoplayer.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
2/6/2015 1:00:00 AM

Valid to:
2/7/2016 12:59:59 AM

Subject:
CN=App Secure LLC, O=App Secure LLC, STREET="501 Silverside Road, Suite 105", L=Wilmington, S=Delaware, PostalCode=19809, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00868B073DB5F27781658C4A94E3A93D23

File PE Metadata
Compilation timestamp:
2/25/2015 1:28:16 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:aieeclBf8B34xcSRYXZ0wh6SrA7UjMH3J0O/oSFw:7MA54JnwkUjMHZDw

Entry address:
0x18E840

Entry point:
60, BE, 00, 40, 52, 00, 8D, BE, 00, D0, ED, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, A0, C9, 18, 00, 57, 83, C3, 04, 53, 68, 3A, A8, 06, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Code size:
432 KB (442,368 bytes)

Remove magnoplayer.exe - Powered by Reason Core Security