Malware scan of setupstart.exe (O S U) cb27b4ffcb6b41f9b8ab654467e31c3a1eac6615

File name:

setupstart.exe

Publisher:

Traffic Space, LLC (signed and verified)

Product:

O S U

Description:

Open Software Updater

Version:

3.1.0.0

MD5:

5a2de3e69e2fdc8731bc68faf4a5ee74

SHA-1:

cb27b4ffcb6b41f9b8ab654467e31c3a1eac6615

SHA-256:

f1135ce4aecb352a53bf579f60ba6d53171127a6b4589c7038026038314cb59e

Scanner detections:

5 / 68

Status:

Adware

Analysis date:

11/11/2026 11:09:47 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

AVG

Generic

2016.0.3000

Bkav FE

W32.HfsAdware

1.3.0.6979

Dr.Web

Adware.Downware.10994

9.0.1.0244

Reason Heuristics

PUP.TrafficSpace.Installer (M)

15.9.1.3

VIPRE Antivirus

InstallerTech

43368

File size:

592.8 KB (607,040 bytes)

Copyright:

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\setupstart.exe

Signed by:

Traffic Space, LLC

Authority:

Symantec Corporation

Valid from:

3/16/2015 8:00:00 PM

Valid to:

4/15/2016 7:59:59 PM

Subject:

CN="Traffic Space, LLC", O="Traffic Space, LLC", L=Woodcliff Lake, S=New Jersey, C=US

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

6C4417841FFCEC12D6EFE825A6723A4E

Compilation timestamp:

12/5/2009 5:50:46 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

12288:h3qY6DQ8WwasFeWK8Mq9tbDxM1GrKnm0cueunJmcDH0cf0WT3:h6TfaaWqTNM1+Km0pnJ1p0W

Entry address:

0x323C

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00... 
[+]

Entropy:

7.9278

Packer / compiler:

Nullsoft install system v2.x

Code size:

23 KB (23,552 bytes)

The file setupstart.exe has been seen being distributed by the following 50 URLs.

https://softwareupdateproduct.com/campaign/.../fixdl.php

Latest 30 of 63 download URLs