player.exe

Digital Plugin SL

This is the Softpulse installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application player.exe by Digital Plugin SL has been detected as adware by 27 anti-malware scanners. The program is a setup application that uses the Softpulse SoftwareBundler installer.
Publisher:
Digital Plugin SL  (signed and verified)

Version:
1.0.0.1

MD5:
a535f29d045652e2ad3d878475e64b19

SHA-1:
a7d39e57c9ae41c99d7d90e2a5609703e345e152

SHA-256:
01bade4790ce00af5854416346bfaa222eaebdc78975fff36fa7dd7e5e22045c

Scanner detections:
27 / 68

Status:
Adware

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/26/2024 12:57:16 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Agent.OLP
827

Agnitum Outpost
Riskware.Agent
7.1.1

AhnLab V3 Security
PUP/Win32.DomaIQ
2014.10.31

Avira AntiVirus
APPL/Softpulse.Gen8
7.11.182.116

avast!
Win32:SoftPulse-AJ [PUP]
141025-0

AVG
Win.Threat.Medium
2014.0.4189

Bitdefender
Adware.Agent.OLP
1.0.20.1515

Clam AntiVirus
Win.Adware.Agent-16335
0.98/21411

Comodo Security
Application.Win32.DomaIQ.FSX
19945

Dr.Web
Trojan.DownLoader11.36013
9.0.1.05190

Emsisoft Anti-Malware
Adware.Agent.OLP
8.14.10.30.07

ESET NOD32
Win32/SoftPulse (variant)
8.10646

Fortinet FortiGate
Riskware/DownloaderLMN
10/30/2014

F-Prot
W32/A-0c06747c
v6.4.7.1.166

F-Secure
Adware.Agent.OLP
11.2014-30-10_5

G Data
Adware.Agent.OLP
14.10.24

K7 AntiVirus
Unwanted-Program
13.185.13853

Kaspersky
not-a-virus:Downloader.Win32.LMN
15.0.0.494

Malwarebytes
PUP.Optional.DomaIQ
v2014.10.30.07

McAfee
SoftPulse
5600.6961

MicroWorld eScan
Adware.Agent.OLP
15.0.0.909

NANO AntiVirus
Trojan.Win32.SoftPulse.dfwfat
0.28.6.62995

nProtect
Adware.Agent.OLP
14.10.30.01

Reason Heuristics
PUP.DigitalPluginSL.G
14.10.30.6

Sophos
SoftPulse
4.98

Vba32 AntiVirus
Downloader.LMN
3.12.26.3

VIPRE Antivirus
Threat.4150696
34232

File size:
1.3 MB (1,393,512 bytes)

Product version:
1.0.0.1

Copyright:
Copyright (C) 2014

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Softpulse SoftwareBundler

Language:
English (United States)

Common path:
C:\users\{user}\downloads\player.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
9/24/2014 2:00:00 AM

Valid to:
7/29/2015 1:59:59 AM

Subject:
CN=Digital Plugin SL, O=Digital Plugin SL, L=Guia de Isora, S=Santa Cruz de Tenerife, C=ES

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
457A2C44F936DD8EEF974AFC80E53578

File PE Metadata
Compilation timestamp:
10/1/2014 1:36:57 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:7rKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakH:7rKo4ZwCOnYjVmJPa8

Entry address:
0x7D90

Entry point:
E8, C8, 41, 00, 00, E9, 7F, FE, FF, FF, E9, 3E, 27, 00, 00, FF, 35, 94, AE, 47, 00, FF, 15, A4, 70, 41, 00, 85, C0, 74, 02, FF, D0, 6A, 01, 6A, 00, E8, 0A, 49, 00, 00, 59, 59, E9, 22, 49, 00, 00, 55, 8B, EC, 83, EC, 10, EB, 0D, FF, 75, 08, E8, 62, 49, 00, 00, 59, 85, C0, 74, 11, FF, 75, 08, E8, C0, 2C, 00, 00, 59, 85, C0, 74, E6, 8B, E5, 5D, C3, 6A, 01, 8D, 45, FC, C7, 45, FC, 84, 0F, 47, 00, 50, 8D, 4D, F0, E8, 27, 30, 00, 00, 68, 9C, 74, 47, 00, 8D, 45, F0, C7, 45, F0, 7C, 0F, 47, 00, 50, E8, 7C, 27, 00...
 
[+]

Code size:
85.5 KB (87,552 bytes)

Remove player.exe - Powered by Reason Core Security