home

apache_openoffice_4.1.1_win_x86_install_en-us.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.afterdawn.com and multiple other hosts a known adware distribution point operated by AfterDawn.
MD5:
40fc525bc8b26ac7e1a7cef0e02a08f3

SHA-1:
cd538086625056065825b9fe1fdf4ac00d7864a7

SHA-256:
d0d6b1dbf3fdadb46dde230a9b023c9035c6b1495e64f02c2babda80b47c6d7e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:00:22 PM UTC  (today)

File size:
134.3 MB (140,852,175 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\apache_openoffice_4.1.1_win_x86_install_en-us.exe

File PE Metadata
Compilation timestamp:
2/24/2012 8:20:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:aVIzo7iqRgwQSETZfXeZ8VHgxBIV8JAKu:7zuiq1Q1xeKVAxI8J+

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file apache_openoffice_4.1.1_win_x86_install_en-us.exe has been discovered within the following programs.

MyHarmony  by Logitech Inc.
3% remove it
TaxACT 2014 - 1040 Edition  by TaxACT, Inc.
www.TaxACT.com
About 1% of users remove it
TaxACT 2014 Massachusetts  by TaxACT, Inc.
About 3% of users remove it
Toolwiz Care  by ToolWiz
Publisher's description - “ToolWiz Care is a set of free-of-charge tools designed to speed up your PC and give your system a full range of care.”
www.Toolwiz.com
4% remove it
 
Powered by Should I Remove It?

The file apache_openoffice_4.1.1_win_x86_install_en-us.exe has been seen being distributed by the following 50 URLs.

http://www.afterdawn.com/software/.../download.cfm?version_id=86942&software_id=644&mirror_id=0&installer=0&perion=0&air_installer=0

http://www.download.fi/.../download.cfm?version_id=86942&software_id=644&mirror_id=0&installer=0&perion=0&air_installer=0

https://www.dropbox.com/s/.../Apache_OpenOffice_4.1.1_Win_x86_install_en-US.exe

http://www.townvaulttag.com/aNfE49n4z91z2ncISY4QkvlDIy5nJ9KMOBBoY_2oQYFWzfYr9X7kHD69ORGNJ3TAVvecn9YNByZLbdR7mQzC0NiTbRVyGoUeI0goJsHt Hn9qnNK2EGTRx8adyojVPRLfea lgQOcaLszQq5hrU9UCek0ZFpwlapbF foqJuoWLipCwB_9scQoe OTU5IAglQ1uvPwPOWOgQ5mw 0oZKA39QlcpJGA==-Ow==

http://filehippo.com/pl/download/file/.../

http://www.vaultsbinariesvaults.com/1AP5qj8uVYbV YwhfA IqWrK1IHrqrbkPC6Ep e06VPXYq4_5vxVmm2s1ZRxgmANtP5LD21gkp7tDFRMIeTv7DunpvkxViEVy5umiSoQsMRLR6anvnIPbVtKvDD4s9W7Erx4VeBHCBhULixJooMg3rSOlH0uRiQ Pz4K4Hw3kQlbHs9zCi6 eyUUEBKAtgKz5obo6dQ0KK3 Rd7kL_dP3h01GILOsg==-Ow==

http://www.headbundleapplication.com/eyqKGTqP7UOfzf1m1FbAy7CiS2B15gBMqVKAAjisGLQxoFQIzlx4VNre5U5mTCb_V TEGExcez0tpjgwwZogFvkEqi8Dqqgp1KtzSi0PGpY UZvHxvP1KKbqEkUOuDuQucc457GAKOl3tY20AABl6y iC _ddR 3lT4ggFYZZb0l1HHbbo_9xA6rRKDcBMzNnCGKtk0h-Ow==

http://www.vaultsbinariesvaults.com/Z784XiPTUeQpdOGkTTU6ZvXqGifH0AKp74t_j4Yjwsutz8Yq9xttKp8w7pi7TXxR2_zfMDuWiII g4p1TK 5N0QUhtiIJOhOvaNxJbV6VXxqn9gJ9RrsFQbucwVdbdPqm6TBTiWONO7hupggMz0 WDa8JsE4hoo_wqqkGTyn7wzjFfJ_bzlLiEQhUxyLGmzhRDjoBprSBW4WrELZ1TlNoXqD9iAGDg==-Ow==

http://fs34.filehippo.com/9456/.../Apache_OpenOffice_4.1.1_Win_x86_install_en-US.exe

http://installs.innovativesys.co/.../apache_openoffice_4.1.1_win_x86_install_en-us.exe&u={617C3697-5E07-4C99-8E60-8CBA25078C5F}

http://fs41.filehippo.com/8292/.../Apache_OpenOffice_4.1.1_Win_x86_install_en-US.exe

http://filehippo.com/download/file/.../

https://netix.dl.sourceforge.net/project/openofficeorg.mirror/4.1.1/binaries/.../Apache_OpenOffice_4.1.1_Win_x86_install_en-US.exe

http://filehippo.com/download/file/.../

http://mirror.downloadmanager114.com/binstallers/BM2/openoffice/exe/.../Apache_OpenOffice_4.1.1_Win_x86_install_en-US.exe

http://filehippo.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://www.vaultsbinariesvaults.com/zSzf4I_t95apEupEK5OiHXUsy4sMW9cvYRR8RwDjDyRVhwdcDyjfh4K6RRFOV7Y1RKj4rMA0YROIdoCiJeJ7EmH IBd0X4ncrYFF5FFXgnXE2eHDNhBM5_cZTwUNlcGjh1nM_GJsfKUJJPtqxuWfjoPpVADBOcEJa5 666WlJoZtl2dsxG4UEdLBC43 Nthuh24SV9HkPdYyTsV3hWSVpEGrAFxs9w==-Ow==

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://www.vaultsbinariesvaults.com/6XYQhHhkkCcWCfdpCjxVnDqhqFiz7qQPagXgk5MF6au KI4SqmtRg5RV5XdJEqWbV0C39fG n_kKdwyVTgrfdgAiZUrBh5zubM6FMoyFfy2L4zxzUAcTVcrTvag7G8CqH_6tXEDQKM9kTGPAaf4JhQ9jicZMZpG2WTpG4Z9egSlBWPGgJFmv5JCyVwv5hxOMDFHa6rFFy UOJctgaKkIuYr6Ihea9Q==-Ow==

http://filehippo.com/download/file/.../

http://netroar.com/download/.../Apache_OpenOffice_4.1.1_Win_x86_install_en-US.exe

http://www.migliori-soft.com/download.php?lang=it&software=openoffice

http://www.centralcapitalbinaries.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

http://c236.y8top.net/2107tmp/cf/soft/2014/8/ba/.../openoffice_411.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://dl3.vessoft.com/files2/.../Apache_OpenOffice_4.1.1_Win_x86_install_en-US.exe

http://www.vaultsbinariesvaults.com/AqT6RxEF6l1UEQGb47LK7sYybxg6f3EgjruEDGIiFYcajtfVShMTxE1q1PRUbpD_HLccOYwQgiiAfSV6oNnLfnFCmVIPV_aa04GYciFsapU95fCCchhpqkimZy3PEREXLFP3CgYaW 1WWq7OUo0fWTkyp_91P3CUtwHhHH8GkKb2tCovan9p31egEzBori8BwQNBo_x8om1vb6w7_gVvE6jogTlAxFxUNOm2XexYPbDU2qBNHJeDf3wa9JaB4SD2QygTQ5T_xgwry8UOMfC8DzJjs1z3u6aYJqXNe0wGP5dIlt nEok4Lc3dbONqDI4DoNiZrJPj8AgILmdiqqJ9eCEk0dhVbLUl5kmgJJxxT9HrqZ8eNeHTP7d4z5BfHNxzBitVTAmWUMyBCWrSvsk QW87uQxh7tgvUEBZPIz7y7gw7CGEqInZbpeVfco4ANhN64VVgtrMahUwmNu5DX_FyFrOTEoOJRCvHVeFatQO9LaMhtfEW_Tc9wxfxu4D5QufUqNxLIodd_g9gTUvrfNAGKjfFvPdNoAVBThPMlt0ql30yW0k3BkFXLsAs5KoAP4gv9jLItoQrk0223zJzHmFy STknU9XJy2KT7IRsUCzEq5 3 ttsOybpUZ_sD2g_lmpobzpyo9jA0Wy_CsZyo38xohcBwN0WnxzGfpu3t8OVjUWPVeNxP56O5GLLt_uUE4NkcjnwQAuRyXXqjp3mina1Bbto82R3gXoEvVOOO8T16HJ8k0KMtf2OYSMKTlRcEtDnqE_Xmk-Ow==-e

Latest 30 of 162 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.