» player.exe
Overview
Analysis
File Details
Downloads (1)

player.exe

Digital Plugin S.l.

This is the Softpulse installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application player.exe by Digital Plugin S.l has been detected as adware by 35 anti-malware scanners. The program is a setup application that uses the Softpulse SoftwareBundler installer. This program installs potentially unwanted software on your PC at the same time as the software you are trying to install, without adequate consent. The file has been seen being downloaded from ttb.lpmxp2114.com.

File name:

player.exe

Publisher:

Digital Plugin S.l. (signed and verified)

MD5:

9cc8384df8eb63bd7fde81f10fa6da77

SHA-1:

2f01a5153d071bf53be997ad2d36aca527665100

SHA-256:

ad07613438723131b2dd8b422050ab6b838395b32096eac4acb81e8d4dda9bcf

Scanner detections:

35 / 68

Status:

Adware

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

2/26/2025 10:50:28 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Application.Bundler.SoftPulse.A

6399251

Agnitum Outpost

PUA.Agent

7.1.1

AhnLab V3 Security

PUP/Win32.DomaIQ

2015.02.20

Avira AntiVirus

PUA/SoftPulse.oanm

7.11.211.104

avast!

Win32:SoftPulse-DX [Adw]

150129-1

AVG

Win32/DH{gRJ+UIEHeVRPFVGBFYEJHFOBE0GBDw}

2016.0.3194

Bitdefender

Application.Bundler.SoftPulse.A

1.0.20.250

Bkav FE

W32.HfsAdware

1.3.0.6379

Clam AntiVirus

Win.Adware.MultiPlug-31138

0.98/21511

Comodo Security

Application.Win32.SoftPulse.J

21134

Dr.Web

Adware.SoftPules.3, Trojan.DownLoader11.24441

9.0.1.05190

Emsisoft Anti-Malware

Application.Bundler.SoftPulse

9.0.0.4799

ESET NOD32

Win32/SoftPulse.J potentially unwanted application

7.0.302.0

Fortinet FortiGate

W32/AntiAV.AVAS!tr

2/19/2015

F-Prot

W32/A-022719ea

v6.4.7.1.166

F-Secure

Riskware.Application.Bundler.SoftPulse

5.13.68

G Data

Application.Bundler.SoftPulse

15.2.25

IKARUS anti.virus

PUA.SoftPulse

t3scan.1.8.6.0

K7 AntiVirus

Unwanted-Program

13.196.15017

Kaspersky

not-a-virus:AdWare.Win32.SoftPulse

15.0.0.543

Malwarebytes

PUP.Optional.DomaIQ.Gen

v2015.02.19.08

McAfee

Program.SoftPulse

16.8.708.2

MicroWorld eScan

Application.Bundler.SoftPulse.A

16.0.0.150

NANO AntiVirus

Trojan.Win32.DownLoader11.ddviag

0.30.0.126

Norman

Application.Bundler.SoftPulse.A

03.12.2014 13:20:04

nProtect

Trojan-Clicker/W32.Agent.1137888.B

15.02.17.01

Panda Antivirus

Trj/Genetic.gen

15.02.19.08

Quick Heal

Trojan.Buzus.A4

2.15.14.00

Reason Heuristics

PUP.Softpulse

15.2.19.8

Sophos

PUA 'SoftPulse' (of type Adware)

5.10

Trend Micro House Call

ADW_PULSOFT.SM

7.2.50

Trend Micro

ADW_PULSOFT.SM

10.465.19

Vba32 AntiVirus

BScope.Adware.Softpulse

3.12.26.3

VIPRE Antivirus

Threat.4150696

36694

Zillya! Antivirus

Adware.Agent.Win32.11263

2.0.0.2073

File size:

1.1 MB (1,137,888 bytes)

File type:

Executable application (Win32 EXE)

Bundler/Installer:

Softpulse SoftwareBundler

Common path:

C:\users\{user}\downloads\player.exe

Digital Signature

Signed by:

Digital Plugin S.l.

Authority:

VeriSign, Inc.

Valid from:

7/14/2014 2:00:00 AM

Valid to:

7/15/2015 1:59:59 AM

Subject:

CN=Digital Plugin S.l., O=Digital Plugin S.l., L=Guia de Isora, S=Santa Cruz de Tenerife, C=ES

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

229111B20CCF13394E8E6CA9EAB4121F

File PE Metadata

Compilation timestamp:

8/18/2014 9:43:41 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

24576:jSw4F0tAS0K5aEwPmd012bvA6BE4xTzS6B89HxxcDsca:29S0CZyM0KNTIdx+DsL

Entry address:

0x3DF6

Entry point:

E8, 09, 27, 00, 00, E9, 7F, FE, FF, FF, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 68, 03, 00, 00, 0F, BA, 25, F4, 95, 41, 00, 01, 73, 07, F3, A4, E9, 17, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, CE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, A8, 80, 41, 00, 01, 0F, 82, DA, 04, 00, 00, 0F, BA, 25, F4, 95, 41, 00, 00, 0F, 83, A7, 01, 00, 00, F7, C7, 03, 00, 00, 00, 0F, 85, B8, 01, 00, 00, F7, C6, 03, 00, 00, 00... 
[+]

Code size:

61.5 KB (62,976 bytes)

The file player.exe has been seen being distributed by the following URL.

http://ttb.lpmxp2114.com/download/request/.../4vEoIKcf?__tc=1408436887.625&lpsl=b38d40606b8e04e44b911f06a81aac10&expire=1408523182&pub_id=176681&ce_cid=20rn.H1ZxNxjwHvG1uHhpe1xjEKh000.&tgu_src_lp_domain=www.dwnlultimatesoft.com&fileName=Player

Remove player.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.