home

install-openoffice-2.exe

Program software

Cpc Net Advertising LLC

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application install-openoffice-2.exe, “Program software Setup ” by Cpc Net Advertising has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. With this installer, users are expecting to download the free Apache OpenOffice but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Prog Installer   (signed by Cpc Net Advertising LLC)

Product:
Program software

Description:
Program software Setup

MD5:
c0bae82a4a853dc4401a34e6b0a3da6c

SHA-1:
2b8d3abc04a259a1b290d06ee0a9a5fa6d2a0be1

SHA-256:
cb0358ff37a3c06d1ba29bec38f529c786ecd3ba6c67263a43be8d4473b94abc

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/24/2024 2:46:01 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.CpcNetAdvertising.Installer (M)
16.1.15.12

File size:
933.1 KB (955,456 bytes)

Product version:
1.2

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\install-openoffice-2.exe

Digital Signature
Signed by:
Cpc Net Advertising LLC

Authority:
thawte, Inc.

Valid from:
7/1/2015 3:00:00 AM

Valid to:
7/1/2016 2:59:59 AM

Subject:
CN=Cpc Net Advertising LLC, OU=IT, O=Cpc Net Advertising LLC, L=Wilmington, S=Delaware, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
2BC1DD7AA35DE89A0D5276ECD7AE32AF

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:mptqS92Jok0GGDVQphycNIhpg8WNdzo96n7pNnX:mPSakaVQpMcNMyfG67HnX

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file install-openoffice-2.exe has been seen being distributed by the following 24 URLs.

http://www.straightarchiveslist.com/.../cj JYbQ85TBt36SyQ6r 8IDUsYJ9XGJT9PXkK9XCZYWnAhKIQhbdVZEacXKQ4KEFGzOpIrL4QifvyGUFs&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=94hSetHdBDJvs33LjZNPuPOrohVAN85GswRNIVT2OLE=&c=c5lGpxxH1zr3/FSQd5P6Ey6sUG99Cv3/.../uFqbMHJxpLpsINhGDgI7fm61jxwlz4fyxn&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../BA LVLGC9ATPFITiXw9rujfQy&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=VgsBcMYbdR ATdpVbTLe07RI8bSXKRzaUku Bq26Thw=&c=8UfkBcPpfayCwlbLSpNxf4nnfWYi2cWiVtl05xAC4KuuR0Gj71YK/VPchdS747t/.../CSKMBz0RqIgg OLGaEv8HKmNTuFoWDMVl31AqDc7Xz0ERro6FmGRM5Ew7N&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=0SQ2/Oncm6pDykunBHyKCbOpKEYK3 zdT8ARAnanvQ=&c=6VX44l9JYN/.../wFzIMmIHJVyh0r7OnaEff37VnUL4UNtAztDthRU2OUuBhGhap3JR6KaVVSPzCqRKUy63tkDzHsz9Len9JSqMzrfBRwdkvcVbliZcu&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../w1tc7FOJdwhoNY1ZatLwIXqTrwBygKQk=&c=gsuJZ9JQqQNOwLUOQ51DsnbX7hVYX EJWbpxc eNkBODFZ2MA84wp0CygFiM0BRtDxDRUmjSvs1YzaOGGtaFSXJpRnpWNngmMdadceDgUdfIekSpmPKvFjJoNCQDQpV6&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=pbzK6c8Im4hOwmJOGQyudKHeDGKa/FwSbQegdPEcrV4=&c=3P8Z8yzOIQ SF2AmUSdAsoUDMHtXbNkJsg7wPEcyN5mCU/.../kABvFft8shMrpYss3CPGqkOvFrabzJRPkx&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=N7MgNQiIEgKbY S52brFAXrskIpUK yoOPNlvZlUy3Y=&c=U93GLoSSCBTKmO0Y74Y1FKUlkmNumm1eBaDQQRc2iMMIN45M2FFPHhVxwYJdB2WlVon8XsBlVe2KM4yqKaO6Cdq9lRnQLDzBlrFBilOeQK1IPdToZUY6Du1fzHnFhp3z&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=tatTuXmn2X3JNDDb2km22H2 A97oXN7/TXA4rXr/tyc=&c=kNIeEzqmdK9SuWE144xT EBjCjJXWIVe7tjj5kgXA0HtmUFMZjqnHK e8yMnITeYYrbxcmguO jOVQa1Y0YBJPNJ5/.../hYG &fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=3BCqguoXEy6ZpO1xtuqqA/.../3tNDmFDDWngCBp ZSkG1LLA4H3IhsKlCzD6G JLQmG8XlNCCebXQJ5YlxIm5fQpTP&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=w5XQTW8kz7QHeO2YWDZulNOSoUp/.../OdJDUVou6HgZomYbsyz7mroHyEdfdI2ZR8nlVIRsy03q7TqHMdQCGyNx5cnpvEOhoPI8&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=FlfCclMC9rNVcKpKSkdoN zsNJZdq1tvYOTW19xjTjs=&c=o1VGx4m7VqwIApQehEugFmaqSV/.../LBIko0P8HnmeXgjJlggKRR gv0vYKRqPnyauG6e7Euf0WEPyfz4k5J2DcgZUdC2ss4tAjp6b39ChLO7B8wlFlttBs4PEo4I&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=CEIzxb6ke3kQBcITfHQg5W1/uTeD1qzd4T7/usZPqq0=&c=37ZptkpP89rwkTT/.../EEQZonVDj9OPrJtinubszvYBkmuY3sc3A7KI2AJxh6ZsV17HdCRml2OHc rGmJX9v5vMvE 5Ewtm5urC88zocsNTMJATUetA hpCwKflAYm84Y&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=1ahkqhQyR53/.../hYc09g6fs32X4Zy10lmZ5R88qzLx2er2uVa0gs7qdTpls19xrZuTboXyCB Q9wW1rf1 7o335rpAUaTPNkpACUKnF2i 1sgWxZSF1EO1PxOLAnA6DLsRYN&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=Mhoq4v6r9UUxB8CgAc/ZyonjOzowINvjgoANXyuvFsw=&c=PCg3PzqhyriKOoImKJ/.../3NAzVDrLeTzEPanIoPFOChYWNQJE964OVrx1GzCuFIZq&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../f0SYG1yR35O2h2h1nFD9o29bAI&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=bGRYOeAQCSYM10zvKiOmrjGJUeXhngQXFs2FGs9phKY=&c=2nhgbFBvVYRv0 TniZZQZXATiie26Kg6 cjrttwupJ1kY8Crbpon/.../W9vwT7OpCyLOTFO &fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../tE5N62iSqJcC0ZpZUF6Y6X1ZOU7 TiJpBA=&c=Y5Dshbn3aKUDFwTc9hwetg V3Qi3yFqh53rKIPAsddjAPrg0JgZIeJVjd klLJs60RUw6UQctLXjISyVE7qVqMfZwEuQiOodrKw2SKcI04w3WnPGbo9Gidur9PleX1HS&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=3SX4jIfqN/lk/mXM3PTX136w3i/.../MW7LUVcN4HQo0YM9tRVnXB3msHHRJ&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=F71xTjyQ/.../11QjAkDskZnAkP&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../gGiuB0fzwPqpr4JoCdD2qkU=&c=iisg LA2lPBq9V4imWNGdt2OLdR5qkiomjWM7z4LI 4HKndWUHystjsYgyl bpKCGc9qw7 1uc7qH5twtrhPdJkwvn3HHfW09FUqYInDL5JSOkHe6aRR1QG98W wSLG7&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=mNijwC8aSnFSM1a/.../Fiphbt8Xy&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=uDxoTE/pYKos0pWmzth bR/.../8pNcvaa7IuXpSGA79X6wK9Znt sn88hblZ1S35fHeUzLlKNo4E2S L g72RxcaRWQesFbA0pkT8Js 2gg4H1YK0go1z43QqnHx 01vPadmf9Rkc3Wc&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=AkIDmhGpcnN1tIxrfxEukYnA3i ovmt/B2AkvXaN5Ws=&c=wx1CDxcMmi5owtcOb87T/w9Gfmv8kUGI/LGWBFjGT5R373YK4f0dRqDmutFNz4Jwyt1kSW68h/.../ r&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

Remove install-openoffice-2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.