1996 pontiac trans sport owners manual pdf.exe

Moshe Caspi

This program bundles adware during the download and install process using the InstaleRex pay-per-install app monetizer. The application 1996 pontiac trans sport owners manual pdf.exe, “Installer for StarApp” by Moshe Caspi has been detected as adware by 32 anti-malware scanners. The program is a setup application that uses the WebPick InstalleRex (Tarma) installer. The setup program uses Web-Pick's InstalleRex download manager and installer to bundle potentially unwanted ad-supported software which includes toolbars and browser extensions through a pay-per-install monetization scheme.
Publisher:
StarApp  (signed by Moshe Caspi)

Product:
StarApp

Description:
Installer for StarApp

Version:
2013.5.19.1709

MD5:
60f2c082115f2410367cc3a85191cc93

SHA-1:
9f194ad9f4ad9e84df4399f37a4d2929052826e8

SHA-256:
a6700e87ee57852651103193724a5234dd54dc206c19604e9a3ae7071a7e804e

Scanner detections:
32 / 68

Status:
Adware

Explanation:
Uses the InstalleRex from WebPick Internet Holdings to install bundled add-ons including toolbars and other web browser extensions.

Analysis date:
11/15/2018 1:31:22 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.9477683
961

Agnitum Outpost
Adware.Agent
7.1.1

Avira AntiVirus
Adware/Adware.CD
7.11.155.172

avast!
Win32:Downloader-UZF [PUP]
140617-1

AVG
Adware AdInstaller.P
2014.0.3972

Bitdefender
Trojan.Generic.9477683
1.0.20.850

Bkav FE
HW32.CDB
1.3.0.4959

Comodo Security
Application.Win32.Agent.V
18598

Dr.Web
Adware.Downware.893, Adware.Downware.1252
9.0.1.05190

Emsisoft Anti-Malware
Trojan.Generic.9477683
8.14.06.19.04

ESET NOD32
Win32/InstalleRex.J potentially unwanted application
7.0.302.0

Fortinet FortiGate
Riskware/InstalleRex
6/19/2014

F-Secure
Trojan.Generic.9477683
11.2014-19-06_5

G Data
Trojan.Generic.9477683
14.6.24

IKARUS anti.virus
PUP.InstallRex
t3scan.1.6.1.0

K7 AntiVirus
Unwanted-Program
13.180.12456

Kaspersky
not-a-virus:AdWare.Win32.Agent
15.0.0.463

Malwarebytes
PUP.Optional.Installex
v2014.06.19.04

McAfee
PUP-FHQ
5600.7095

MicroWorld eScan
Trojan.Generic.9477683
15.0.0.510

NANO AntiVirus
Riskware.Win32.Agent.crfild
0.28.0.60253

nProtect
Trojan.Generic.9477683
14.06.18.01

Panda Antivirus
PUP/TSUploader
14.06.19.04

Qihoo 360 Security
Malware.QVM20.Gen
1.0.0.1015

Quick Heal
Trojan.AntiFW.B5
6.14.14.00

Reason Heuristics
Adware.WebPick.Installer.k
14.8.7.17

Rising Antivirus
PE:Malware.Agent!6.25
23.00.65.14617

Sophos
InstallRex
4.98

SUPERAntiSpyware
Adware.InstalleRex/Variant
10535

Vba32 AntiVirus
Downware.TSU
3.12.26.0

VIPRE Antivirus
Threat.4753027
29708

Zillya! Antivirus
Adware.Agent.Win32.8569
2.0.0.1831

File size:
293.4 KB (300,440 bytes)

Product version:
1.0.0.1

Copyright:
Copyright © 2012 StarApp

Original file name:
TSULoader.exe

File type:
Executable application (Win32 EXE)

Installer:
WebPick InstalleRex (Tarma)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\1996 pontiac trans sport owners manual pdf.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
8/2/2012 3:00:00 AM

Valid to:
8/3/2013 2:59:59 AM

Subject:
CN=Moshe Caspi, O=Moshe Caspi, STREET=Hashuk 39, L=Tel Aviv, S=Israel, PostalCode=66067, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B1B859272556EC39AF8F0E4A626C2ADC

File PE Metadata
Compilation timestamp:
3/12/2013 10:51:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:jrV26Y0JQBkQRl7174NpNUM+UHs+V+qys5Ztdq754jpYkQSZCd3X:jrV263yRl1uqM+gs+suL3W2JZCJ

Entry address:
0x14DB

Entry point:
55, 8B, EC, 81, EC, 2C, 06, 00, 00, 53, 56, 33, DB, 57, 66, 89, 9D, DC, FB, FF, FF, 89, 5D, F4, 89, 5D, FC, FF, 15, 74, 30, 40, 00, A3, 08, 44, 40, 00, FF, 15, 70, 30, 40, 00, 8B, F8, 8D, 45, EC, 50, FF, 15, 6C, 30, 40, 00, FF, 15, 68, 30, 40, 00, 8B, F0, F7, D6, 33, F7, FF, 15, 64, 30, 40, 00, 33, F0, 8B, 45, F0, 33, 45, EC, 68, 04, 01, 00, 00, 33, F0, 8D, 85, D4, F9, FF, FF, 50, 53, FF, 15, 60, 30, 40, 00, 85, C0, 75, 41, FF, 15, 5C, 30, 40, 00, 83, F8, 78, 75, 1A, 68, A8, 32, 40, 00, E8, 43, FB, FF, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
7.5 KB (7,680 bytes)

The file 1996 pontiac trans sport owners manual pdf.exe has been seen being distributed by the following URL.

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to r1.stylezip.info  (54.186.255.26:80)

TCP (HTTP):
Connects to c1.stylezip.info  (54.186.255.26:80)

 
http://c1.stylezip.info/?step_id=1&installer_id=6769790&publisher_id=769&source_id=0&page_id=0&country_code=US&locale=US&browser_id=4&download_id=20309370&external_id=0&session_id=40618740&hardware_id=47388530&installer_file_name=1996+pontiac+trans+sport+owners+manual+pdf