home

setup.exe

Softpulse SL

This is the Softpulse installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application setup.exe by Softpulse SL has been detected as adware by 9 anti-malware scanners. The program is a setup application that uses the Softpulse SoftwareBundler installer.
Publisher:
Softpulse SL  (signed and verified)

MD5:
1b658c1e438c80559bdb87f64c5a81c4

SHA-1:
b8b66533c597fc172e3a8a625c9e133b6ad36750

SHA-256:
67619d9c05896b6dec95d51e6790a8fc20bb35057e616892c3abd985b5243cab

Scanner detections:
9 / 68

Status:
Adware

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/19/2024 7:13:55 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/Downloader.Gen
7.11.163.240

AVG
Generic
2015.0.3403

Dr.Web
Trojan.Packed.28243
9.0.1.05190

ESET NOD32
Win32/SoftPulse.B potentially unwanted application
7.0.302.0

G Data
Win32.Application.SoftPulse
14.7.24

IKARUS anti.virus
PUA.SoftPulse
t3scan.1.6.1.0

K7 AntiVirus
Unwanted-Program
13.181.12846

Reason Heuristics
PUP.Installer.SoftpulseSL.F
14.7.25.10

VIPRE Antivirus
Threat.4783235
31208

File size:
663.8 KB (679,736 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Softpulse SoftwareBundler

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
Softpulse SL

Authority:
GlobalSign nv-sa

Valid from:
2/11/2014 5:48:56 PM

Valid to:
2/12/2015 5:48:56 PM

Subject:
CN=Softpulse SL, O=Softpulse SL, L=Guia de Isora, S=Tenerife, C=ES

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11210602DAEE0BE4AA7D855EE48D3D77A3CC

File PE Metadata
Compilation timestamp:
4/15/2014 5:32:13 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:TQHTXgbsovW8a4XKmGvJ+b+Yh7+myFEwKVYRK3es/L5:TQHTmsovW8NXKAKYlwKVgKlD

Entry address:
0x4C049

Entry point:
E8, 3A, 88, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 09, 41, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, D2, 0C, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 93, 36, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, B2, 06, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, BA, 40, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, AD...
 
[+]

Code size:
453 KB (463,872 bytes)

Remove setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.