home

apache_openoffice_4.1.1_win_x86_install_cs.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from ftp-stahuj.centrum.cz and multiple other hosts.
MD5:
d4bef7202d4c6eaa8e93ffd040581f46

SHA-1:
a08650503f66b6fdf4db84f6cc6a7e43f0371a72

SHA-256:
800049d4c63bea91e566c93f9296278fd52fecadcbad45948860dc5c9329a8c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:05:08 AM UTC  (today)

File size:
122.8 MB (128,741,109 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\apache_openoffice_4.1.1_win_x86_install_cs.exe

File PE Metadata
Compilation timestamp:
2/24/2012 8:20:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:GkLzkXzvrIrIZxDOjFkVOXLsM6uch7IAwrBCNuqVAK7:ZXkXnIrIZxDUFkVO4e3FBqVr

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file apache_openoffice_4.1.1_win_x86_install_cs.exe has been seen being distributed by the following 18 URLs.

http://ftp-stahuj.centrum.cz/dl/dae20f4f318840fb5c9d818199089220/55a23353/stahuj/download/software/secured/o/openofficeorg/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://ftp-stahuj.centrum.cz/dl/9baae94b6ecc55cf8e7b46e32d1c5de9/55f5506f/stahuj/download/software/secured/o/openofficeorg/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://ftp-stahuj.centrum.cz/dl/5f2390cdfba4ec9b24543054ddd35b88/5623baac/stahuj/download/software/secured/o/openofficeorg/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://ftp-stahuj.centrum.cz/dl/b17779883bea9dc9dcd9b88065a99a99/561130f2/stahuj/download/software/secured/o/openofficeorg/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://ftp-stahuj.centrum.cz/dl/b28e1bdc2860c2fc32878149ea120e2a/5608031e/stahuj/download/software/secured/o/openofficeorg/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://data4.stiahnut.sk/downloadFile.php?n=b3Blbm9mZmljZV80LjEuMS5leGU=&s=p6qlluccvsq0cchu2d32tbq0b0&r=d7b3bad9788d42c0da588b4b05c27ef0

http://www.slunecnice.cz/sw/openoffice/stahnout/25305/.../?md5=fk4enWTMc4bQ-S4bjf0GDg&expires=1441222532

http://files.instaluj.cz/dwl/368c62b0fb36a9e1cb4288d83b33c332/podnikani-kancelar/textove-editory/openoffice/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://ftp-stahuj.centrum.cz/dl/7c67382c632b3f8e1d11d1c1d726b753/5616934f/stahuj/download/software/secured/o/openofficeorg/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://files.instaluj.cz/dwl/94255d84ad914077a1898ea23a163673/podnikani-kancelar/textove-editory/openoffice/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://files.instaluj.cz/dwl/ba6c59fde16edb8b0a111844a8e7df33/podnikani-kancelar/textove-editory/openoffice/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://ftp-stahuj.centrum.cz/dl/e677571a2fae2f017373fb5f0c58cdb8/55f929ac/stahuj/download/software/secured/o/openofficeorg/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://files.instaluj.cz/dwl/cdbc72fd858c537c4e15c0cd5be50193/podnikani-kancelar/textove-editory/openoffice/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://ftp-stahuj.centrum.cz/dl/c5ca318fac57644def6016d474999549/55ca07fa/stahuj/download/software/secured/o/openofficeorg/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://freefr.dl.sourceforge.net/project/openofficeorg.mirror/4.1.1/binaries/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://optimate.dl.sourceforge.net/project/openofficeorg.mirror/4.1.1/binaries/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://cznic.dl.sourceforge.net/project/openofficeorg.mirror/4.1.1/binaries/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

http://downloads.sourceforge.net/project/openofficeorg.mirror/4.1.1/binaries/.../Apache_OpenOffice_4.1.1_Win_x86_install_cs.exe

Scan apache_openoffice_4.1.1_win_x86_install_cs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.