home

files4.openoffice.fm

Domain Information

Server location:
Texas, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
openoffice.fm

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.DownloadAdmin.V, PUP.Installer.DownloadAdmin.Y, PUP.Tightrope.DownloadAdmin.Bundler (M), PUP.TomorrowSoftware.SKUNKDOGMEDIA.Bundler (M), PUP.DownloadAdmin.FullSpec.Installer (M)
100.00%

Dr.Web
Adware.Downware.2220, Adware.Downware.238, Adware.Downware.411
21.43%

Sophos
Download Admin
14.29%

ESET NOD32
Win32/DownloadAdmin, Win32/DownloadAdmin.A.Gen
14.29%

Malwarebytes
PUP.Optional.DownloadAdmin
7.14%

NANO AntiVirus
Trojan.Win32.Downware.crgjbr
7.14%

Comodo Security
Application.Win32.DownloadAdmin.TTK
7.14%

VIPRE Antivirus
DownloadAdmin
7.14%

F-Prot
File is damaged
7.14%

herdProtect (fuzzy)
a variant of 20c1ef5ac103eae86f5015ab0a3d14962138e8d1
7.14%

Trend Micro House Call
TROJ_GEN.F47V1006
7.14%

avast!
Win32:Malware-gen
7.14%

The domain files4.openoffice.fm has been seen to resolve to the following 23 IP addresses.

104.112.235.19
a104-112-235-19.deploy.static.akamaitechnologies.com
June 2, 2016

104.96.220.233
a104-96-220-233.deploy.static.akamaitechnologies.com
June 2, 2016

104.96.221.98
a104-96-221-98.deploy.static.akamaitechnologies.com
May 20, 2016

104.96.221.91
a104-96-221-91.deploy.static.akamaitechnologies.com
May 20, 2016

23.220.148.8
a23-220-148-8.deploy.static.akamaitechnologies.com
April 7, 2016

23.220.148.33
a23-220-148-33.deploy.static.akamaitechnologies.com
February 23, 2016

23.220.148.19
a23-220-148-19.deploy.static.akamaitechnologies.com
February 23, 2016

184.51.126.83
a184-51-126-83.deploy.static.akamaitechnologies.com
February 9, 2016

184.51.126.90
a184-51-126-90.deploy.static.akamaitechnologies.com
February 9, 2016

96.6.113.59
a96-6-113-59.deploy.akamaitechnologies.com
May 3, 2015

96.6.113.122
a96-6-113-122.deploy.akamaitechnologies.com
May 3, 2015

23.0.160.11
a23-0-160-11.deploy.static.akamaitechnologies.com
December 1, 2014

23.62.7.9
a23-62-7-9.deploy.static.akamaitechnologies.com
December 1, 2014

23.62.7.33
a23-62-7-33.deploy.static.akamaitechnologies.com
December 1, 2014

23.0.160.74
a23-0-160-74.deploy.static.akamaitechnologies.com
September 5, 2014

23.62.6.66
a23-62-6-66.deploy.static.akamaitechnologies.com
September 5, 2014

23.62.6.51
a23-62-6-51.deploy.static.akamaitechnologies.com
September 5, 2014

23.0.160.72
a23-0-160-72.deploy.static.akamaitechnologies.com
September 3, 2014

23.0.160.65
a23-0-160-65.deploy.static.akamaitechnologies.com
September 3, 2014

23.67.242.115
a23-67-242-115.deploy.static.akamaitechnologies.com
April 11, 2014

23.67.242.120
a23-67-242-120.deploy.static.akamaitechnologies.com
April 11, 2014

23.67.243.24
a23-67-243-24.deploy.static.akamaitechnologies.com
April 11, 2014

23.67.243.19
April 11, 2014

File downloads found at URLs served by files4.openoffice.fm.

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_impress&brand=openoffice.fm&pid=TR&bc=586&country=us&cb=1527832434  (openofficeimpress-setup.exe)

1 / 68      (PUP)
http://files4.openoffice.fm/download/.../dl?bc=608&pid=TR&brand=openoffice.fm&s=MSN&c=openoffice.fm_suite&country=GB&cb=-2051981276&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1&executable=1195513  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=-1092764644  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=10307&country=CA&cb=174354943  (openofficesuite-setup.exe)

4 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=438911024  (openofficesuite-setup.exe)

2 / 68      (Adware)
http://files4.openoffice.fm/download/.../dl?bc=608&pid=TR&brand=openoffice.fm&s=SEO&c=openoffice.fm_suite&country=NG&cb=-391004683&osName=Windows&osVersion=7&browserName=Firefox&browserVersion=13&zTmp=1&executable=1186365  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=10305&country=UK&cb=500352046  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=-494267432  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=2139260864  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=1335949524  (openofficesuite-setup.exe)

5 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=62668184  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=-812289886  (openofficesuite-setup.exe)

0 / 68
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=-1290585512  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=-981811760  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=-127907904  (openofficesuite-setup.exe)

1 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=-1940195502  (openofficesuite-setup.exe)

8 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=1701054845  (openofficesuite-setup.exe)

8 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=154973620  (openofficesuite-setup.exe)

8 / 68      (Adware)
http://files4.openoffice.fm/download?s=google&c=openoffice.fm_suite&brand=openoffice.fm&pid=TR&bc=608&country=us&cb=-97190696  (openofficesuite-setup.exe)

The following 316 files have been seen to comunicate with files4.openoffice.fm in live environments.

TCP » 104.112.235.19:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 184.51.126.90:443
kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
messengertime.exe

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
whatsapptime.exe

TCP » 184.51.126.83:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.112.235.19:443
browser.exe (Browser)

TCP » 184.51.126.90:443
8dda4b771a8b9ff7908171c045da8d64.exe

TCP » 184.51.126.90:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.51.126.90:80
dailywiki.exe

TCP » 184.51.126.90:80
apptrailers.exe

TCP » 184.51.126.90:443
a57eeb101cdfb5c17d8102e57ed49a51.exe

TCP » 184.51.126.90:80
updatepodoweb.exe

TCP » 184.51.126.83:443
tortuga.exe (Tortuga by The Tortuga Authors)

 
Latest 20 of 332 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.