abiword-setup-2.9.2.exe

AbiWord

AbiSource Developers

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
AbiSource Developers

Product:
AbiWord

Description:
Installer for AbiWord

Version:
2.9.2

MD5:
bcc0b1796d32f155803279d139d607bf

SHA-1:
06d8b8674911aad90d9b767424b07bf5dca5cf0f

SHA-256:
287e58cd32a165e522dd07eeb4d6daadbc25110ebadbfdc10d735120f6966bf2

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/18/2024 10:28:33 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Trojan.Agent-661337
0.98/18355

File size:
9.3 MB (9,782,897 bytes)

Copyright:
© AbiSource

Trademarks:
AbiWord, AbiSource are trademarks of SourceGear Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
2/21/2009 8:46:34 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:veaxTXrh4v6Q/PgmxZr5f8UNjHKJwoix5uJ5xdEd/qjAkyNWJwsHErDwNy:b94v6Q/Pnxh5f8ajHpJu5xduqO4J4rl

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 05, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file abiword-setup-2.9.2.exe has been seen being distributed by the following 15 URLs.

https://dw.uptodown.com/dwn/OrO6KA4DU8h6Y6dv8kIU8k_7gnk8m7PHiYIiGQ_QGumoz0Wfu1KUFtPdW8Tz_eAVcNyr0qG-DfdrGQlmoNtp8SM0b0If1xrKqKdmyZ6vYxfBgPxwX1LuC15UKy0T588z/gzvXdRjSbaMTLvHfyTxfZ6UkN1xqCGQJEcogjtBFZMrFeCnkZ38iFsSxRM32VR4493tWlIxrGu0VqZxmpPxxVQU0SGtobogi0RcnDcpwdA6rAy86W7TVCR7YrlkQVrdO/jDDfTE5ddLGg6tqgAgdebBp2smAwTfmPb7ktmDUsBhXhyROJTBb3IK0DKqHOSS80LCeUADo1igmAFYzqcqbBs6tc5sArDDGLKoIX4k6orzioRaC5fuBoEoXujRbKSHYF/.../

http://www.towerbitscenter.com/_PSoHgNcp19bqhZtZaFya6UGAtbjCSUgQfx3wmheYwNnbNQShA54yGx hMkLSzt8UGpwmkH1xNUehZXY2JUj_lgQgT ySXjv0yTyv8qc7Usz_lJVCw9Rbhlj5Ch E75AQuIZ3AiUQixoCw3E_5zN9Atj1afxV9VA1rVjl_k837Mf1pBTJRdNWk3HC0_9BTwCUWQGMhK6TeVW6ySZtAOTyeBs9myV5g==-G08AAEQ3F5MTbLaoZ8H0cy_cY2zsr1jDNWUBx FzjSjpi2uM8D yes9dNCTptEbWq2DV4DDtmUhL880RbvAT

http://www.towerbitscenter.com/XOr2XWLgdTgs7kGYLXrg40lClJ1noA tIwGin0PLW0K1rg6QI7 BOXSfIUjbgVJ4J9v3CndORs2 PBuM3cl_wtMyU_LEHCuVlCmbbjbCMk9pbTmjBf51VQ4ytuL1lxc56 CWHn3pLO_XcemHEhQM171VkDwu79WW40yazYI_FmpCBAQHAEwhCJN KFk7LwBVk4AbwnOh0SH89RaYzgR5I87HN nKeA==-G08AAEQ3F5MTbLaoZ8H0cy_cY2zsr1jDNWUBx FzjSjpi2uM8D yes9dNCTptEbWq2DV4DDtmUhL880RbvAT

http://logitheque.univ-bejaia.dz/pluginfile.php/16/mod_glossary/entry/.../abiword-setup-2.9.2.exe

http://dw.uptodown.com/dwn/IrFfPykSgDnSY1jE_KV-89xT8AaZA4MeEiMDRqT-rrkWfxvEz18ZYrMTij4aejzlUeoA1xrBn7Pe05chHqZbabzfLoOtvB0hLwK_FDAAb7qQYhN4hP7nRZaesM2_nbJm/OpLjp_uqunZSSWNPiDVkeIqkHc5RHVBqhGAdPzH0DMupOkZxBlnprdJvJrPPWgvDYM_o-DzoWQwkTb8UPybYfEJGg7Y6lySasqiZVO4jZcoHM0MeX3B6uqBPGgbljxxK/mhiJLbKj38rK4-hjwKFC7AIQKSVGNTVcOrFJ4HES4T-TgZt4btfm_mFEGt-CQPfJ6ew6srfcLVHlwcxsmXNxWupY1CywITFuf2CiXYqOftenpKemm8VqYAlywVNzbTVc/.../

http://telecharger.tomsguide.fr/AbiWord,0317-6971628.html

http://www.ranchsendgift.com/phfyhDplW3MEcWozav_5a8KFsn0tiueq8QCAVE8ICiwKY8FpP8nUeK7YVdzqtjzm9Zw0o9xaKvFonSO 0hWUjP1_3eeKsdR3dsbXaf8N4pmhrbtZrgt sR4M1ZzjR0ZcF2Od3qUQhaipvOKNelLkSSleOmwiIIYYGY nx68qeo6mk1uZy5U5Nc NblhB7HTNWcegV4KwGh_t4SR2j4Db7VJQNPrUBA==-G08AAEQ3F5MTbLaoZ8H0cy_cY2zsr1jDNWUBx FzjSjpi2uM8D yes9dNCTptEbWq2DV4DDtmUhL880RbvAT

http://abiword.software.informer.com/.../

http://www.ranchsendgift.com/rKDvR7FFFmOqMOF88P0izXvGdfPk eEKMl2JdO3j9uBc4aO4SKoz3kivyYf5UtCo31WtPeOUeZ5NdWefPipoBFD0gRPze9pOfZWSKPl0x7IctX0yiD5jgi4pqR7_cObda9yBfahTHPeOVP2R5dSoMw_od3dsyVwdMOelIiMmohNsa2PQueR739H0i2XZdAPlC1Dh8wTywvdUnkDyx7dYX03onNJ7BA==-G08AAEQ3F5MTbLaoZ8H0cy_cY2zsr1jDNWUBx FzjSjpi2uM8D yes9dNCTptEbWq2DV4DDtmUhL880RbvAT

http://www.packagehostdownload.com/2EhsOTBnxM0ID14igmTXnMbCeX4Ix2unJDt1HgnQqOgIbKW7CCStd XzaqfcKDRIyqVAyQyYDoC_UvdWlIzde1_hANLZ9qAAkfDLyzE1wEPzR_ggo8e5J0Gf94aq1Ye8gqv7SAeJWcA5ye35HFW ohnjlWNe5TFGoygdvEiZCEX Wy7nitl1ouc7Kby6Fs9ubWVrI0IG8ukoYIHmKQrhS5SKfXnKPA==-G08AAEQ3F5MTbLaoZ8H0cy_cY2zsr1jDNWUBx FzjSjpi2uM8D yes9dNCTptEbWq2DV4DDtmUhL880RbvAT

http://www.ranchsendgift.com/W0u_2DrQ1Xtrd5u6mCqMS0S_ZE9W_PyfKPsZTs4BIPKwVgKHTTif8PMPrK1OYI90T293BCQ7OpUYqNDluWUQ1BMxzZ6AJouhQErhiqMB6_GSZT8GSbQ3_yaJK47wZ72zAlzH 0oeT9oer4Gdaq7i3CYxq4uZ4xCX2upNf0H3AWfYk1iczs5u815I8GM_ozAdPYv9Z6tZCv1_CydweoctkbNr2NaiVQ==-G08AAEQ3F5MTbLaoZ8H0cy_cY2zsr1jDNWUBx FzjSjpi2uM8D yes9dNCTptEbWq2DV4DDtmUhL880RbvAT

Scan abiword-setup-2.9.2.exe - Powered by Reason Core Security