home

soft32downloader-for-macromedia-fireworks-mx.exe

Soft32 Download Manager

I.T.N.T. SRL

This the Soft32 ad-supported download manager that bundles additional PUP offers. "During the download process we may show commercial offers, such as a toolbar or other browser add-ons. The download manager is in no way affiliated or endorsed by the author of this product." The application soft32downloader-for-macromedia-fireworks-mx.exe by I.T.N.T. SRL has been detected as adware by 13 anti-malware scanners. The program is a setup application that uses the Soft32 Download Manager installer.
Publisher:
Soft32.com  (signed by I.T.N.T. SRL)

Product:
Soft32 Download Manager

Version:
1.0.0

MD5:
fccd822e78a954dd98300bd7e3fa2c2e

SHA-1:
8871a55bdfc7f492375c88a199a049e082c9e94a

SHA-256:
778aeff5fb0dcaa9b35894ffa98860436c46ed85f127b9150bdf9cdc0ecc9ae0

Scanner detections:
13 / 68

Status:
Adware

Explanation:
The setup file is part of the Soft32.com download and install manager. It is an ad-supported installer and attempts to get the user to install various adware toolbars, browser add-ons, game applications or other potentially unwanted programs. If a sponsored software offer such as a toolbar is installed it might change the User’s home page, default search settings and 404 traffic. Note, the software installed by Soft32 is probably safe, just the installer is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/19/2024 9:17:10 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Downware
7.1.1

AhnLab V3 Security
Win-PUP/Soft32Downloader
2015.04.29

Clam AntiVirus
Win.Trojan.Fakeav-38280
0.98/20703

Dr.Web
Adware.Downware.8
9.0.1.0119

F-Prot
W32/FakeAlert.YI.gen
4.6.5.141

herdProtect (fuzzy)
variant of soft32downloader-for-nokia-pc-suite.exe
2015.7.29.6

Panda Antivirus
Trj/Dtcontx.D
15.07.29.06

Reason Heuristics
PUP.Downloader.Bundler.Soft32
15.4.29.1

SUPERAntiSpyware
Trojan.Agent/Gen-FakeAV
9907

Vba32 AntiVirus
Trojan.FakeAV
3.12.26.4

VIPRE Antivirus
Threat.4783370
39486

ViRobot
Trojan.Win32.FakeAV.383472[h]
2014.3.20.0

Zillya! Antivirus
Trojan.FakeAV.Win32.126830
2.0.0.2303

File size:
374.6 KB (383,624 bytes)

Product version:
1.0.0

Copyright:
© Soft32.com

Original file name:
soft32-downloader-1.0.0.0.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Soft32 Download Manager

Language:
English (United States)

Common path:
C:\users\{user}\downloads\soft32downloader-for-macromedia-fireworks-mx.exe

Digital Signature
Signed by:
I.T.N.T. SRL

Authority:
Thawte, Inc.

Valid from:
12/22/2010 9:00:00 PM

Valid to:
11/25/2011 8:59:59 PM

Subject:
CN=I.T.N.T. SRL, O=I.T.N.T. SRL, L=Sibiu, S=Transilvania, C=RO

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
310D835910263315766C6E2C657AF7EE

File PE Metadata
Compilation timestamp:
12/16/2010 1:33:34 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:Eah+TO0g4oZwLk/MX9LuantRPFi0e9pREOqTZyxPTC62LA9rJTqsBrPkopPqX0Rs:EE+O04Zca8RnXFi0e9fAtydT+U9dTfBk

Entry address:
0xF5980

Entry point:
60, BE, 00, 10, 4A, 00, 8D, BE, 00, 00, F6, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Entropy:
7.8531

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
340 KB (348,160 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.