home

google-maps-with-gps-tracker-34.0.exe

Sipid

Setup Manager LLC

This is the Softpulse installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application google-maps-with-gps-tracker-34.0.exe, “Sipid Setup ” by Setup Manager has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Softpulse SoftwareBundler installer.
Publisher:
Setup Manager LLC  (signed and verified)

Product:
Sipid

Description:
Sipid Setup

MD5:
f415882f8914ba77f6f1bfd0ac829385

SHA-1:
a8bb01e111c31d18cf6eabffe96192a389e13ab4

SHA-256:
729fe8e3bd06e3dc4622409d6e31fb09fcfb27606a71b87a42ec8fbe854d1d2c

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
12/25/2024 5:21:26 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Softpulse (M)
16.8.11.5

File size:
937.7 KB (960,232 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Softpulse SoftwareBundler (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\google-maps-with-gps-tracker-34.0.exe

Digital Signature
Signed by:
Setup Manager LLC

Authority:
Symantec Corporation

Valid from:
12/16/2015 4:00:00 PM

Valid to:
1/15/2017 3:59:59 PM

Subject:
CN=Setup Manager LLC, O=Setup Manager LLC, L=Wilmington, S=Delaware, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
5B54F9A49482444F2A26324DAC8E187D

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:tRiG+3ZC4aAJFya33Vl4iggHXdbtG2x3GDMkjlQefNut8lP+nZZclKhC2IqjzvaY:tRiH3Voa3Fl4pgHXeaGRNSLZGsIt

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9333

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file google-maps-with-gps-tracker-34.0.exe has been seen being distributed by the following URL.

http://www.ranchsignbundle.com/XtdoPAYviSHqDM1l8V0PdynR ckjb860c3gyfd KSrhiPaeKPt_mz7qsg6I6E5e1Vcwrb8N6stDT2EKcgLpNJiu_jwEL7Ziwv_lg0FIVRJtPvDu fs13q2cX3nPi2SZupVHrCVvzbzEg6PVmnuigJeg903waGGoAytbbYNJBhHv271Z5fUrqwYIgTa QC0 qUrtNHwSfJHTl1U b0q08wogcEzNkI2y1r4s Ji4Lnx0w9fi0WNntRSqvX6L28VpfrG3wkLvzOZ0 P 9dJR1aqeHT5CNJwKihTcJwRoH7fF8EcszIYu8ScmcRYUrVu0b5dZyLU2HIVJHHuo4SGZ43Opb3d69D6qELdIxXZ0Qqb9zQEgkdWuXCVlEd_7prMWwtok9BYt96OfH3KL983tCUTjk2pXncA0g6TL4tsgk1eA0 B0LHnDnSp37elm 3HhYhYIxOOUMGRBCWARvt6jExFvpFMvNAzyrrk8gwyyuVQA74DD80gyMM3omIaYDTNSGR1GOGt9mDDLT KqYZJRiwiP9oQD7dHVKJUDxSsGTvYmuN__zzac5gdWmrJk5CXFRpPX gKrkEsSlU5L6GXBW CRZAORLXR8QHhJF398J4GCSW8K7AKqZh4soUMyQGu0aS7YoafkmUWjqjKKQdyNhYetDdMURiAYI5yuNV_Qx_CP59ocrZiwmglkw Sw SUtLR_LubG9iSUv_NQQO_CMH4oyDw087sncOAObL0ym3o9oOeHry_hDk=-CwiAZmlsZXpvb21zLmNvbS80MDQD-E

Remove google-maps-with-gps-tracker-34.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.