home

apache_openoffice_4.1.2_win_x86_install_pl.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from liquidtelecom.dl.sourceforge.net and multiple other hosts.
MD5:
cfac5ee8f295af68479a4b109dbf7fa3

SHA-1:
b5a2e1e62b1c78a28815f17684dae99cdf1a0ebf

SHA-256:
7b383446ddd3ce10fadd63a1f1223d8f75c2e483adb9fd01b9a2b915072887d3

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/2/2024 9:21:46 AM UTC  (today)

Scan engine
Detection
Engine version

Zillya! Antivirus
Adware.CrossRider.Win32.30811
2.0.0.2542

File size:
125.3 MB (131,422,152 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\apache_openoffice_4.1.2_win_x86_install_pl.exe

File PE Metadata
Compilation timestamp:
2/24/2012 8:20:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:iX6Ly2iQsUDqpQ/6eLLq4rhDH7QRu3+fz8N4eAKP:k6LRiQsUDnLLqqhDIu3+4N4e/

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file apache_openoffice_4.1.2_win_x86_install_pl.exe has been seen being distributed by the following 41 URLs.

http://liquidtelecom.dl.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://superb-sea2.dl.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

https://downloads.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://192.168.1.210:5000/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://s8349.chomikuj.pl/File.aspx?e=rIF7QssykHLjL_-E73abj7DRlHzH6CDJh7vYAUL-tVYGsKGCU6xsLxyQZYqT3cBEytDApJiEYFeuxRyAlLCSDlxYWhWRxdxIzjuTEsuOa238Bc4YhjXa3Bv9XVEs1uyoTFcJGSTRiW3JBbkMmUW1-uVMWSCDdf_vRcngZdeLG62S-Wf8BtIEsR94Jjjjz2130wuWNzGnnVoCvoHbAvOD0A&pv=2

http://pilotfiber.dl.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://dpcdn-s10x.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://poformacie.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl_PoFormacie.pl.exe

http://dpcdn-s11q.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://vorboss.dl.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://www.softmania.pl/?d=files&a=get&item_id=739

http://dpcdn-s11.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://dpcdn-s08.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://s8349.chomikuj.pl/File.aspx?e=rIF7QssykHLjL_-E73abj5TS16X_e1x-tSqeyKJkbhft2yUjK2Za8atpaBhy_qZbZ4jFc8gw9bu_GpwoZhXjTMbcnpN4lMNQtq-rUd-THfvdTXpWkMvqOQpQWqVEyiZEg0uinvjvczz1ilBpLjb6r_shceQMRpdu2LRI8UJBklHmx7L7IlEfGe_HtrO0DbSj&pv=2

http://tenet.dl.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://www.presentdeliveryapp.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

http://iweb.dl.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://www.speedyshare.com/rcYDx/3268db32/.../Apache-OpenOffice-4.1.2-Win-x86-install-pl-1.exe

temp:Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://nbtelecom.dl.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://www.apache.org/dist/openoffice/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://dpcdn-s10.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://dpcdn-s10q.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://jaist.dl.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://dpcdn-s05.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

https://wetransfer-eu1.s3.amazonaws.com/19dbeb3e5abf03d033111d8b4177e58720151130105111?response-content-disposition=attachment; foo=bar; filename="Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe"; filename*=UTF-8''Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe&AWSAccessKeyId=AKIAIQ6E6WYDY7EA2ZIQ&Expires=1449151817&Signature=H3zsvqXpXuuYkNN408E5qrfMq5o=

http://dpcdn-s09q.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://dpcdn-s09.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://archive.apache.org/dist/openoffice/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

http://skylink.dl.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe

Latest 30 of 41 download URLs

Scan apache_openoffice_4.1.2_win_x86_install_pl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.