home

apache_openoffice_4.1.2_win_x86_install_fr.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
MD5:
00866a0fe691bd78d4ca37985febf851

SHA-1:
3dafa7294d75c3afc6cd649da9db6517b5f36a57

SHA-256:
1ebcd91ee640293cd29a112a73776e0cf30e2c0745e7f1e3310c477096c8c86f

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/25/2024 1:50:52 AM UTC  (today)

Scan engine
Detection
Engine version

Zillya! Antivirus
Adware.CrossRider.Win32.30811
2.0.0.2539

File size:
126.2 MB (132,342,915 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\apache_openoffice_4.1.2_win_x86_install_fr.exe

File PE Metadata
Compilation timestamp:
2/24/2012 8:20:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:fH0Qwg96sJFE8+a3aE+GsZjUrxXlSHXE+Pz22oDOUN9Gu8R09VOnQAKE:fH0QwgUiSOJ+GsZjqxMXHPz2WIGHiJU

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file apache_openoffice_4.1.2_win_x86_install_fr.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/932f70458572962837e9f6db7da37a21/587538b1/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/25a4071172d52c9a25b2c60cd5216a92/5848479c/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/69c9010deedbd840d1946b8537fd70f2/56b0fbf4/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/dd4725613e1c4bd6c65e9a4f6ede139f/57eedbbb/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/0f4b3af13273d9b1af890f1539c1bea7/58281f56/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/39264271d8035fd06f5677deb03b4f34/571af6d1/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/305eb3e9683b6f04059abc203415d016/582472f4/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/9c49b67c7b57002b429192c93b0ad178/571357e0/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/781fce388780bc003709dd9638894fe5/586bcacd/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/3e155ef3e531b9dcc0d3d667a68c5fb1/585937ef/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/fa031e9c77383f5ae7a7261d2f302458/585d5423/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/328b48a32d073e97673ebfda875c86ce/582ecab5/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/73dbaba70ad38ef1a6b5c6621a7dafd2/5803934f/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/4cd394fffb6048561167caefd022e786/587cddfb/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/8931b72b0bc7010abe37e742df7f0c31/579dcb48/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/5f1e60edbf7a55b2a48eada4b628781e/587d2f65/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/14fee82b43161aec4a59a069030803d3/57eabe8d/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/05f34a9454543b1436d5f7175375e1db/5894f03a/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/660f15404909f554d757535c83f7f4c4/587686d6/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/da6537195ff066ef3230678cdc9707e8/5808cae7/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/0cbc0f5062eeefb2010ed5f84dbc3cb8/586be5d3/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/2dea2ca605bf2e77532af423105698b8/5878f442/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/4bedbc0d2568a2e1950923a63e5de4ed/58615415/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/1fbc1ebae6e3600a341685adb7ef1a98/56704828/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/d90890d241d13826741df527c2c3624d/581a22bc/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/8a0892036693e56fb73029fc80def42c/57fbb9db/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/5e595191bd7a0f263474c6adce40ae05/589da2e6/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/b000feb924095c598c874c9b6ad548a1/58593962/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/7e4b7ea3a2d9cd00e0156a9d02e89cb8/585008aa/soft/.../openoffice-org_4-1-2_fr_10677.exe

http://lb.cdn.m6web.fr/d/c/a/cdf0a3e88cd53b22f4f294f9050e889d/585a55fe/soft/.../openoffice-org_4-1-2_fr_10677.exe

Latest 30 of 606 download URLs

Scan apache_openoffice_4.1.2_win_x86_install_fr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.