home

andy_v41_12.exe

ANDY OS

Andy OS, inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from andyroid.en.softonic.com and multiple other hosts.
Publisher:
andyroid.net  (signed by Andy OS, inc.)

Product:
ANDY OS

Description:
ANDY setup

Version:
1.1

MD5:
d8345b91cd59c94ae01bcd2701d1e197

SHA-1:
c4e25bcb081744fb2c687d84119883ccb8f35368

SHA-256:
c16dc1af972055b0cfac3eadd7ce109b093ce679a7826fed25a489ba12b731d3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/15/2024 5:48:01 PM UTC  (today)

File size:
529.1 KB (541,760 bytes)

Copyright:
© andyroid.net (ANDY_BL_Standard_ANDY)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\andy_v41_12.exe

Digital Signature
Signed by:
Andy OS, inc.

Authority:
COMODO CA Limited

Valid from:
10/14/2014 3:00:00 AM

Valid to:
10/15/2015 2:59:59 AM

Subject:
CN="Andy OS, inc.", O="Andy OS, inc.", STREET=450 townsend, STREET=], L=San Francisco, S=California, PostalCode=94107, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
27E8615D5D72176AEF91AA9263AEEB75

File PE Metadata
Compilation timestamp:
5/11/2014 11:04:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:k/uTZ3aCBN4xkBc9b4bKvKKzWy1Z2NZNAb2brPyyytdI78ifuvmYYgUKayQiKpFO:laCcxuocb8KKSDNTlbWpnIE8gQLpXh2

Entry address:
0x3217

Entry point:
81, EC, 84, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 89, 5C, 24, 20, C6, 44, 24, 14, 20, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 8C, 72, 40, 00, 6A, 08, A3, 98, 67, 44, 00, E8, AD, 2D, 00, 00, A3, E4, 66, 44, 00, 53, 8D, 44, 24, 38, 68, 60, 01, 00, 00, 50, 53, 68, A0, 94, 42, 00, FF, 15, 64, 71, 40, 00, 68, E4, 91, 40, 00, 68, E0, 26, 44, 00, E8, 57, 2A, 00, 00, FF, 15, B0, 70, 40, 00, BD, 00, F0, 46, 00, 50, 55, E8, 45, 2A...
 
[+]

Entropy:
7.9719

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file andy_v41_12.exe has been seen being distributed by the following 19 URLs.

http://andyroid.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMdEJmHSznRR14M/mMdXyDvewjwv62DFoQj/.../3351FEjFQJ9ce2Exhyq8r4pqLyP

https://dw.uptodown.com/dwn/LOyZKA-4e8a2CECkxi6uT_Ie5NB9_dvPdI1eeAYM4auyVobs1I4eYAfjxHkeiVd0RKDdKRQJ8l4y8xBwW-cBxIFr2BJ6PrpaSekNioo_aGLKuqzPNhHpFg40Ie_fM3Et/8EN0HL0M2cyilR0EvaCKOLmnlBjIrxGUvxMEPjQqmHpHfBSfaMQOD24DnCgkNbx11SuFhRLJm-_Hx-tV_fG18_jnV-zt7t7l1XPToe_hP28xC372-pbtkFL_n1hsvymD/AM47FNlKTfFZkvilY1CHil6EG5YD8nBlnS6xNX-o4PWdLCgKbcFouzBh-OOl1R0c7mX_30aw_xXgJQVRC4bw9Is17MjQ250BAuEBoQVUZv6qZ7Q4fmT9cESdSEJOIbcm/.../

http://dw.uptodown.com/dl/1447624062/.../andy-os-1-1-0-0-multi-win.exe

https://dw.uptodown.com/dwn/ogDrwnYHuU4USvDEwSO2RZsajDnuSmovSnap_20TV6hgrB4oxwIoDoqTbnPGDxgromOu2jnaXPFSUzCGQxMkzVM2AltIpSPVqM5C-rRTWEdPmR3QWn4DGt_SUucA9yH5/VZFi9PCuuvBTVW8BuYGH4fUl8tWfoBmxPVLWdOf8AsIKtNZ1EkoZtkjJc8TbA9swY_1HIkRJZccSs1miLKW0vWkT6W7aJgPL9t3O2J6hqpjtKUKV9jG8imhDEXGqfsOv/vhPsrhPtyQsWxQZhkIDEoRzYIJPlS01-Zy7SQ_VO2OVAQSQTTbnzSEY880hFOVIsFolrPvrgXvWMKI4ysgSk8fieOST0hvCcwQ6xEaVVp8U8x-CnaoX8IQY3Ettqcj4i/.../

http://ec.ccm2.net/www.commentcamarche.net/download/.../Andy_v41_12.exe

http://dw.uptodown.com/dwn/v3IL8Saj0XBQtdchi489fxX2UUEC6PvL9HgmEyRdY3cEB6HW1i_6wa8og4ivehAqSpyroMMkmR8_HlyXBbngtED6VdOfy11CNhDjNd0O7rlstBY1Z7e1KT1GvremmQcZ/fCGuP4IqAaZrSmTNZhgFAfFxhoAWKDlKSooWzu4oJKPFhp0jLXBWf4OiQPbf1-mYAxfq8Q1P_gj_97XW9wFmzwPB5zBrJym1rbB-um2mdldRYOeDkdGOTK1T5ClZ3t7o/.../

http://dw.uptodown.com/dwn/iS4P2I3TtB4hzkk5rDep0vec6D54CHaZGoatrSHO-EyRgpXb5SAdgewhaM9ZVqme8wOidBEa2-pMFBRQ9ln7xddJAo4hIYZUUx8_YIEarT4VvMn5h-kcZTDS1zne0Bst/.../

http://dw.uptodown.com/dwn/r9LNT7IDuflAZGwjBEFw-qFwniaizdKJgRKsXG4PVIxzOe6odTC7dgLmThykUQQUHl35JfvSqQqQhABOeb-pi5g1MKwyrqa3NN9RnNaQV98KZkfqD4tMW3MU-CPPf_aG/4bc_lr-w8akk3HSP3aLHsHZ_w7QEgP8GC-pO23EpFUVvDT2CtJLX-GiZ7NXS0ePOwvC24aZ8vjcEqdUiiE7OZI9cOHAge2ML0UjSs-HB1IQn0AZFrIZrUTn_PvKIyULY/.../

http://dw.uptodown.com/dwn/x-AiykSrIfe1TC9tzag6-beB03qBB-YU0brCUX0ccLiyE_1S0E8uikTFgjJCbF4j1VbLAyy2omg9UMw4bl0R79vSdu0Swft6fvAbP-3XgZ_pv6FUz3IqajOVxfrv31gX/zlVp3ih1Hz5gfKFZT6SWvyhOgC3-qrbntqyQcfI7DkvMdMmLpp9OJDNdgyEh-mLWl6X_1x8tG3GjqNe_qTlQ0DxxjsrjHa0ecItAHZ1PLmD-p3b2CmHIvnmfsvedbNj2/.../

http://dw.uptodown.com/dwn/NonGyJx78JnKDdt8fi3KkH_bq5Po9W9pixV__VUBFgm70iFOSFGEw2F9bXyT2y3bMmxOWxAzOpAOWKoohiPCTBHneXeZQKUMLgQAQ-ud5_Sqqqn04vtKEEAeceU3NtME/R_Kb-4HBou1-X91QaoJJrokwb0qjXOAwEw3iVI-rtB-oW_JjBiX70tez0j1RAoUz8stn8AZOLVo0o7fL_RDL2K_HJt5tsvPQidAtdnm26nDFhJmesGLtXzzn1dnADQ5N/.../

http://dw.uptodown.com/dwn/a28shIQVHrX9oTfFrJE_iMroCOQGxetRq_5hhRgp9VL-eU-J2-10vUK4gtlf1VzbbFh7giDhudRzHY3oRDt-2cemZXSScSsAkXr9qr9HTS06p6wihY08malKqTCf3F4I/2gyOadQngngHqvpGsBaZ22XbNG48wdj0x9eX9a0-sVKNsOcGctj1xQ5mzafSTAZLtYKJUsUy62AU7mNEnIr5CXIcsedZnysvGFTNfp0NIHbwnzENzKWBLig-Tr_q6RZr/.../

http://software.thaiware.com/download_url.php?id=8401

http://dw.uptodown.com/dwn/hQxtiF01bfrBr-1mz4qb-6mb1NiuKEY_R6ByjXws9HadVdx9rBlEgyxaNivv7HjxBGE6QOCn1yHwgop4uSKVGhzDwikoW8R2QJNrVT9XQk9N5cppNsckeEbo7x7cXuyy/aOhWsrY5SAEKbxG54dkn2Gq_m9ubVpAxSZryYZkN2H-LNSWAh9KDoDmFtOyLfVDWakYbQfdMVMopViHnA8JgaRCjJhUNu8yCBnxf3Ct4kwXTeAIZbq8RSnEx5mv_C5N3/.../

http://dw.uptodown.com/dwn/EM9bDOFKCj8P-dN8RLNkE63G_kSw9NXmllnTtpWTReAD9dQ6oWlTmFXrUuHPgdnmmtcAIRCZP_mXEveDsXSvDrkQHIlMPGnX7EP6Ys1WktLMPv4-N6Dk4a4AeQpAHbXh/j_myz0ZwSUhjl2D5wvS-vnoYIny3GU8N7OQtPOmx8nih71lThm5ispykrczQpQ09x15apqv1NK4-0FIH5bcSQX48x2EmUsPEbf91Xn5ShUItW_Z9q8YEBfnUXcjcwJB2/.../

q=http://bit.ly/getAndy&redir_token=KZ6W1tA2oJYa9Zt2RL_3pHS5nCp8MTQxNzQ3NjE1NEAxNDE3Mzg5NzU0

http://d1ubedgu4eka0j.cloudfront.net/ANDY/installer/.../Andy_v41_12.exe

http://bit.ly/getAndy

http://www.andyroid.net/getandy.php

http://www.andyroid.net/getandy.php

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.