home

apache_openoffice_4.0.0_win_x86_install_de.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.bitstagcontent.com and multiple other hosts.
MD5:
1249c1d256bbbc01ffd1f44a41389f75

SHA-1:
37f511d0700c64fae1ad3f83f1022ba415b64bd7

SHA-256:
5569634ac40b42a710c666d0511f6aa4dbcb05d1a525e06f6be038e828c507f0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 5:08:24 AM UTC  (today)

File size:
154.9 MB (162,401,424 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\fc14996dfa99adfc7baae624196888c5\4943ac76f68986229778471032ae9dee\apache_openoffice_4.0.0_win_x86_install_de.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:zx5Zknpxz7AKg/svkQ54PpIZtBs1MSWNezaeJrheEQpM2pMTlBbe3KWcAAKf:lkb8skQEIzBWW/arhgpMhTXea8v

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file apache_openoffice_4.0.0_win_x86_install_de.exe has been discovered within the following programs.

OpenOffice 4.0.0  by Apache Software Foundation
OpenOffice is a widely used open-source office suite.
www.openoffice.org
About 2% of users remove it
Toolwiz Time Freeze 2015  by ToolWiz
www.Toolwiz.com
About 5% of users remove it
WISO Steuer-Sparbuch 2011  by Buhl Data Service GmbH
Publisher's description - “Make the most of your income tax return: With WISO tax software you get back from the tax office, what you want. Ingenious: The WISO tax savings book guides you through the tax return and provides you with practical tips on where you can save on taxes.”
www.buhl.de
About 7% of users remove it
 
Powered by Should I Remove It?

The file apache_openoffice_4.0.0_win_x86_install_de.exe has been seen being distributed by the following 50 URLs.

http://www.bitstagcontent.com/EBmRp366VBwVWL0EQXXjwQqvp qHvXZhmKTwmcCMb7BYnolrNw9co_Hx8IwmZ9C eMVEV5U7GOG8HnzLuRzlx62CJufeLbefR7y9lKHgiuOu21M7_9mKBfNXeISenML4CD3gBe3D1dOs SIgTpXVpJjxb_gRHz8StVihVFnNV2PYu0ZltVX8Zf_LGb X3lICxMHAZiUq-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/8SS7e8Vds5y_J90T0zst_ORlQWddFvrwlRllq HmOJtHcmIBGjgx62x82D73ZERGyzehyQFzOGP2kxftD2uop 92RUZwGv1nL1yVmXeGHb_X4MYNNe_tQQyapiYPjhXzZhobP_WnszfY8SA8isc3mYGWd8LBGfTiHWdo__lFIppL1Vv22rYxaI91n3yDC3I_OqYrnyKXe7DBG tFTLdSYjavihdpnQ==-GzEAAMQ2RzH5gSBmwWpJV0VYWRdiyCQS6QvbQNxYUWQ1EutJRMoctruclfEB

http://www.towncurrentuniverse.com/S_BMtrZM7ZRyEjDqFkxYcQEfnBP5V9qAgIHAf36mZX6jg8f0iCWtGSHRfmcm8GjAZAckPIFMm1ib3_bS2yQGBzSjaX02n7zq9qeJS9enAJkATpYOQCGsLDxRgxJg8iGaIULSzAPxiWlPAnxk6_jcNQHMv2muHUQItKhGuSiNK8CMos_0H8PaM0bHVZnt8_miw0QawBHeUFITpLkX4mBVpHkrfdwJEVsOGL57NvCc8CkfA8bziVUZFYhu8b2sxCqgtDvHldKCW9x8_JZM LsSutvFFfkFGjABWg6yfE0ipMZnFHHtYFlsSoFgMt_hArX jAu4Xjeo6QzyID_pPIMcAuQgimWtimE0lY4LvNNOC1jYUURDFOfrIqoqUhyUBcQeO7AiulKIVkHdZhKGFUTVey2Sp0WRedMJCPMi0ucQttUg3q79Tv2CQKrwk5f3aQ2Sw5qz4LgoTVOIeIDnRYJL HtbYCfWaRfHYNtOv2YihFnN1F_urOXSKMDnQo0NXR5HoI59B HGjQ6PrQVLvOPXViynQrxddwNpowtasqJp1qjVRd9Kq6un QuV5yBgUCf1onl8iv4DNYi3lDk3_yUqLw2Xb0uBoA4CHI72a5XVOVN3sagtVSu EGg7ZW70ZmkQKcglyrkvPga_6Q0kuEtOQdveSqhfYw5fxmZcE2bi4aE8k3lGA2kb6ctTE amAzVNCdNEkMRvkbAXHbNkI_zdnB2wHlQ37fcxd6js0R46WVYO6v2PNTRIhhPA9B67Cp9gYjOoI3TtPsJm8_GDPpCv_j5BGMgpqcY0MGEeV4RlZLrBt4fg dc=-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/Z g29pfWlVHsoDQ5afiVg7HbejdjRoImKsvuuvOw6Y9f7XHTZ71ZtppVuljgt_vOlRvJaWoqOmdLpkTZj_Qv9kaQPEC_WURezxIi3Ncx48UYz0AcHfRDCBB8Yyb80InTopLJDT5u0GAYSp1v0ACY3z8EY_YuJ6w5yIouiAfwxGvZtcg Due5W3Me2s0_WcgM_Eoce6JZ-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/PeDFT ROfj8wjLpWBfYB4TkzvPjK0Et_ or3mWA9ixqFLMm1FKqedmu54hgSUfDohLOO6sNkeYvVTM28PrvAKOLuHEUgfou4Rtt sFLG8AsBOETaI27A0hF3w6L7ZVfv5k8jB9_yxs13I6jBlNXcfK1dK6TOdJkobRMDVThfR7C5NBUCVU7ubM5CvT6ZebKSqC fifgJp5mZN6MSRJC0s3KBuInUg==-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/MhJm6AQXHn7p_U3amehqKU0_EL9xa Ces7TWPnie7mXIPdKx 8WQHlYp8yoVy16Rc3VW6iVIygHqqf1IsjJGCFlKr61P4HGLLUmL_uE5OUggHK7MPsn45Xq80pNiKpVLzBtvXPouab3dHjp64NDZqUmpRN7qrLT6QA9ITm _Y4XT4pNuwo8_gwzFLKFM4sxq7jMU fGVo9sZeD 0yVsk8qmvchslsw==-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/CL z2kNYD1NWpYJR0DL13R0T6ZvbZN5EAL_R5AE58FEYP3zvKKa010Tbr6S eV84wcs_3Q_kkdir j ApfRoxKizGJ4Q1Dt_bJgLvbYa7m5YdvpEfbC78rV92YV2UZPBZCIGwJe8SzjiAQSm UTwHZazpa6LQ0LUqJsdTrAWLXjheBFUoZk7svKn 1SIO0zOwkzCU6L2gSKXiL6FGy1bZc1CtGUqzA==-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/u 1RUqrhaP2Spp4Mo_r5dOacwqUF3F6x9jXCRXl2i0 rz_I9KhPB_Xm8Nw5AmTqIaTmbSKVXIZiddQDxaodugy5Q6Q5fmQSL2HqyfJ2m6tJJV0zDgkiQeTBelB84tQu sSx1J4Pw2OBo9pIyiK8jNu 6ZsLm0h1hLAxFgyolr7eWOCXmhwLsZjQ2WeZdxV4 FK45TIPOI01Fy1xo0X 17vcCuw0sew==-GzEAAMQ2RzH5gSBmwWpJV0VYWRdiyCQS6QvbQNxYUWQ1EutJRMoctruclfEB

http://www.bitstagcontent.com/xVz9EctoY1EY_hZaHktUajYlAgtunmdwpA6dNzSyr XJNiz22 5VmU87IXC62H3bxyiBQ8wKV54P66cYT3cUDy_gf_NENK3D7wjqLxYIHnWbr3MZ2Z jGg131ZLTfNz1EdTajx84b7OXV55B_ZugVjH_Xr evpFWoubV jC7GlPsg3lPGez5FzyNrCQMpvO9Y4Sv8SUEYdkeX8Lf7kdJzB4DgCq_ZQ==-GzEAAMQ2RzH5gSBmwWpJV0VYWRdiyCQS6QvbQNxYUWQ1EutJRMoctruclfEB

http://www.bitstagcontent.com/Ab9hoLs08j79Nl4t5bvA5iWSDZeDnQiIHqDwudYOScX wqRoWc53lqftzOfyzTdlivtL6Vr5MD7ILadbFQZ9Fh3OPsmZ8e_RLc1pRh7yV7higTkCaj6DNZGWoaH5DQQEFVtOP0ygvKlB40C3s2UfsJ_FBuBqls2e1bLTZ5dJTkUxnQ8zDE xxb 2OtSOuJx_lEZ kT_2-GzEAAMQ2RzH5gSBmwWpJV0VYWRdiyCQS6QvbQNxYUWQ1EutJRMoctruclfEB

http://www.bitstagcontent.com/Ayx8SMYQfOVBinZcNK6EJeUvpJCBO0EmgJ4BOQc6v2TMigjj95wGJmLfuELP540cjVC9Zt FgWpXq5aWdLBnS79IR6vHJ67ecAxSpP8QZImwsYAXdphF00igb1EexY7QIcZdQYELm 1Ok0qCLCl6C_yl8MVtwf2tfGKKZvNThtAg2pQ6AYq2CxMs3rEy3wTyQC3tLOeC-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/znJkGfZ1nRse0ok9Ic6sb7xXCpyTRuJ0VxgFfCEPAh59lKyDgcqsgeGUM38xBdsyYA1Ax4OFTA7R39U9OAst3jZJ1ab3CNKd risXlNGA0taJCvGc5uvCtgRpN7QabBQ F4m7ZPYMPqHhjtnG9cjIpRf0KKCwjAhiLcX9W4kcAHoRfXKORZslwiOHo opmgpQ_uisChf-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/41V0NGP1utTaKqVHl9RvXeAXuprgj18Zi21EL9xj96TTqElxEubq0uWp6RGhCRm2CEFqomuWYrWWAfr8zgMTkGEE9f4PtJ_mQyvSCMwnsMkds0tsf7afVz0RvHZh_eMSRqL9066xBYawQ2nBVFRHkTuPiQ5PiEG4TlUk6dhByGHLRWr9pejp1VwbLy10b2gYsvMAhEMy-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/ZjY815bwg205iblySGrmLZpvs0NkSbEzc7JLdOQBDRXclXIMn4SZWSLtWHYl0OEjiTNFAqgpEJi2bq4sJV6N0grwqh6L8ktUndhA_6TSovYcGGOOhJJzNbxb0n6CEsrqggL2DUkFwG63R1ByH6wbZVAz1OjHfaVJi1LR1vu3_eeQH4DDtuCldo7mY2iuIHcxVaJnye6K-GzEAAMQ2RzH5gSBmwWpJV0VYWRdiyCQS6QvbQNxYUWQ1EutJRMoctruclfEB

http://www.bitstagcontent.com/kJUofDuwxtYIT0lpTky614sS esWS49D0Pi4qDoaCDnc8IMm2D2Je0khdQmexpiDoLP7y3dItIqwLAxfr5UZnKkKRs1zV_pSxj75oILN53JUpGLRgK_bTGY4S3d78Ncc y5aTVYpezqA3Y92SUuF QmnRNbIy3TUeSN8E3idx5hJQ3U3UIApJtqV5OtHH7n0GWTfB_74-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/kTz8TRjQRQqGGDqX DgPM5j3YJZR5I_Ri8AsvxifXfrOTV3o0O6JO Q8gsWQPa9rkMMj91eBt2J7qod8 Eai6OC2iJXmD3TffNhdMmivIpxob95cOZSefNN oorz0MWgG 5XIvJRfgvr0gZpCiQqkay751VVVipxp7Trm7o8J9EY4pZJGSLKjF3TQBH8OPAmPQ3CZZ2B-GzEAAMQ2RzH5gSBmwWpJV0VYWRdiyCQS6QvbQNxYUWQ1EutJRMoctruclfEB

http://www.bitstagcontent.com/hjK2e7EpDioVkM7djiWKFBK xxJJ3vP6pYR6644Zqo56kMBePcw9M6iCp5dpDN pUQupmT6TIlTxfYJ0WvOhJihmRN077Gm39CwrozWAfjTeokfGktVGbXJb8AvibkMmBdUDslniIv3dysZEApM6eha5xW0rmOOh90MlzWXVhoYcwiBwiRyzRy1L BKmKmPbicWEFrjPcldxADaOm5eM3uLGU yX4g==-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/EAG0Ojless4UByM3mYAjosumiueMmmlrNRPVWCdz_nkfsT7iV z535Zlnl tie27SiGUOQznP6AA68hwInsr5DfbPbC3L0E70nQm7poECyX1V5SNwfNnbhN8IqXOL5nyncni3u66U6drR6WmRBTyDHSqAnia4JnYinSRSURMvtCFlfzzGwUO0NjI6h16qdzpsRuFikfABBzQ7jNJ99njs00bcKAQUA==-GzEAAMQ2RzH5gSBmwWpJV0VYWRdiyCQS6QvbQNxYUWQ1EutJRMoctruclfEB

http://www.bitstagcontent.com/NAL0G1ZJG12B3J3ZM3Jv80YtkjlUvPv1ZNAmmDjcn2Jk45eJa1OSg8zC7r4sGml0HDS3swsrKQQZyK4YIoqkKN5a hUki7NQRyAUp15SqG6VP0P0zAauxD7tpAdJSHmvbTIZuP2S_sZVqRI1m3KFgHADFC08mwrVo3O5gSpB mVIYUNG4Rc4kZCyuKkXCTQmiB_nL t_-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/tmHkP8D_ZNOGnJ4ZSada60teOsZuupPc5Vs0LEnXBEOuLuWiSkncQxQsbOVfHWICOHW KObAjWEez14aIOmUr7gkJpuIlWAlSlHD2HgmI6R1lPZt u8dtbInf1se4 VBVJvMPa4BVQYxKn3vFGifboaRssA6vY_ 07 0xszRFHjDFN_V87P0eSOJ5sd3nQEYmv8Teta1-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/mga6RNVDxEItzBCzv6ukqQIJsQNol66KwLJ7elifTtcXpivrxWVSXyKYdyOsh6QRrT2ME5KxE13m_nrBd7yoJFQHVEgOY_SfJEhbWzI4VC7bSL9l50cZ3LftwXCeygg6lav8qoRZCrLulask71Nbpo DScpr6ruhm_X_3SMOiVMxXScEtafX6Vwi0UAvNk4awjT8kbw8-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

https://tmpfile10533.s3.amazonaws.com/download77/ic_trackings/4995/.../openoffice.exe

https://tmpfile10533.s3.amazonaws.com/download77/ic_trackings/5623/.../openoffice.exe

http://www.bitstagcontent.com/TLH_o33fi5mVRo2jXvzxAb_ 7xdvNjBxvFlckashtEWEv5a3 QCJmGifSTdlR Zqeyo_uAkvawPcTKQieApdiFWKOVaUPhX JxkJ0ZTxi cpLjSViZS OSQV7jamQcgTJ5U4A5aKerILRIfTiXkOFCA0eKvpufOMmXguNgK7SwxomO2YdCrDLjfmX_FPBEj9cJvB9MZb-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/UVFb057en75hA_I85yAFp8Pl6f2PB2SEZjxXwglTbenCN3h0MAOq3e8R0xCpp8WI46auYXKHOwN4Uia4YxgyYguj8jQeEnnlhrF__hzL1ACd92 lnd4PSwYryfcv2RSaY_GLfjogbnthGd6LUylayoP32mTzbzGHnIXW8W0tvDAOuhjtWZP6cfCzyn6jSCWl8AEEo5lG-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/itMnIyB8oN3XcTFKqTCAg6tZG sYQOsmIoH8CPPm6UOdfxWH3y 3h1 LWwV5DqLZ8dYKqWjeDQRUmlhuN844qEkA9l6wxaa8tgyeHyZQY7Qw1AYJRg5In7TtwtLiCXR8kebu9ltIqJT7VEBSYnWt4s753O3BxBU4oONJGJ I1CPL9MxG9mrxlszKDKxKlnSivo9ZAEjy-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/lpKXd5VqRcMOTjer4cCrF77dDqlOJg4cXlEdVIdb47v3nt9Z6dnwXAVsHfweEfmXYCu n066J64gwNqSW3gudNKnvSrAXMZwY5rQWsy_PeO99GrGxBTbokuJtZu3wtKS046_iy2pYzdxzVCwKhnKrSnZVH7Du76ora1AQAt5_E QrYA3lr bzYMEgJKWkmox4l6EHCXJxjSTf_xPlS4w_ifClfnfpA==-GzEAAMQ2RzH5gSBmwWpJV0VYWRdiyCQS6QvbQNxYUWQ1EutJRMoctruclfEB

http://www.bitstagcontent.com/ccFyyIIjd12TGcwT94AsjLG0Tykr6TIzLHJGBrA3AN6TaG0iJfekumiyaU20yurZFt7Sm3Sn7dl2oIGNk_gDHXGHb914Ud47q 7sfY2tJdYBJD1pgfuUwm8ESZIdXzN6LVMA_ZtzPv7 BcuoQYkZvU_8NIO9rxr5D1ryX3pFWBqmM4dTFck2gRi7gq0Il5AQqtWaPwl0-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

http://www.bitstagcontent.com/3lBE4x3mLMPh8F7l_PsPG0dM AYYP1sxpEfGdsC6mSjyt9 NG_uiPNxQiNYC4KuIkGZhskiAVvMesFNL47QYPk5dIF2kQ4t9jvquSYFS7hiBULilG8YoGgp21G0LjIe FyRYCx3CpuBSLmFuI9k3jWtdnUbKqnLFkuxvopT0dpR8MIGJANtgvoTfDAfNuLxd_93D9avO-GzEAAMQ2RzH5gSBmwWpJV0VYWRdiyCQS6QvbQNxYUWQ1EutJRMoctruclfEB

http://www.bitstagcontent.com/1LhPjLRu4nPMECB7I6jR_xVnTZ724Cqun5k8qAA5GfPeCCnfmgQXH7BodqVum17HlV7RCIf_Hp70yV0Gkk3HgVEJ8MqcwTBRG9HVrmRrPGoEFNW8_M0FpI1pCSWfKZPMXoO9CJmGSvs1y0FWQ7lUTZZoIECL3SXLbhMOkUpDGXpDJNluWFgGuWRz7uCyIvXayXTo_Vvc-GzIAAMQ2RzH5YjELVku6KsLKuhBDJpFIX9gG4saKIquReE8sXWUO213ByvgA

Latest 30 of 108 download URLs

Scan apache_openoffice_4.0.0_win_x86_install_de.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.