setup.exe

Sambamedia SL

This is the Softpulse installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application setup.exe by Sambamedia SL has been detected as adware by 26 anti-malware scanners. The program is a setup application that uses the Softpulse SoftwareBundler installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent.
Publisher:
Sambamedia SL  (signed and verified)

MD5:
61060054e669ba3d86b640905c7a959d

SHA-1:
346dfdf41d4062da8445166d67c2ddc4e1333574

SHA-256:
22994b6aa0a233942199839528c9b87ff625e154dff9bd894ae30d724a4977bb

Scanner detections:
26 / 68

Status:
Adware

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/19/2024 6:35:20 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.5
918

Agnitum Outpost
Riskware.Agent
7.1.1

Avira AntiVirus
APPL/Downloader.Gen
7.11.164.206

avast!
Win32:PUP-gen [PUP]
2014.9-140731

AVG
Generic
2015.0.3396

Bitdefender
Gen:Variant.Application.Bundler.5
1.0.20.1060

Clam AntiVirus
Win.Trojan.Agent-744874
0.98/19168

Comodo Security
Application.Win32.Softpulse.A
18505

Dr.Web
Trojan.Packed.26825
9.0.1.0212

ESET NOD32
Win32/SoftPulse.B potentially unwanted application
8.7.0.302.0

F-Prot
W32/A-7488f3d7
v6.4.7.1.166

F-Secure
Gen:Variant.Application.Bundler
11.2014-31-07_5

G Data
Win32.Application.SoftPulse
14.7.24

herdProtect (fuzzy)
2014.9.10.19

IKARUS anti.virus
PUA.Generic
t3scan.1.6.1.0

K7 AntiVirus
Unwanted-Program
13.182.12911

Kaspersky
not-a-virus:Downloader.Win32.Agent
14.0.0.3272

McAfee
PUP-FIG!80B7D2700B25
5600.7052

MicroWorld eScan
Gen:Variant.Application.Bundler.5
15.0.0.636

NANO AntiVirus
Trojan.Win32.Agent.dbitwg
0.28.2.61148

Panda Antivirus
Trj/Genetic.gen
14.07.31.05

Reason Heuristics
PUP.Installer.SambamediaSL.F
14.7.31.16

Rising Antivirus
PE:Malware.SoftPulse!6.197F
23.00.65.14729

Sophos
SoftPulse
4.98

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.0

VIPRE Antivirus
Threat.4783235
30086

File size:
789 KB (807,920 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Softpulse SoftwareBundler

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
4/24/2014 8:00:00 PM

Valid to:
4/25/2015 7:59:59 PM

Subject:
CN=Sambamedia SL, O=Sambamedia SL, STREET="La Botavara, 1 2", L=Adeje, S=Santa Cruz de Tenerife, PostalCode=38670, C=ES

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B3AB0358C7184E7B47E1675806B74132

File PE Metadata
Compilation timestamp:
5/22/2014 12:33:05 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:E21GT5b+s2KVzxFAu27Mms/p9kh3zPSBH/dRUshEMsPDaYBKDEWf8/:E21lRKVzxFAbVshJBH/PHELaE

Entry address:
0x4D137

Entry point:
E8, ED, 7A, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 42, 36, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, D4, 0C, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 95, 12, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, B4, 06, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, F3, 35, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, AD...
 
[+]

Entropy:
6.3419

Code size:
454 KB (464,896 bytes)

Remove setup.exe - Powered by Reason Core Security