home

install-openoffice-2.exe

Prog

Cpc Net Advertising LLC

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application install-openoffice-2.exe, “Prog Setup ” by Cpc Net Advertising has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. With this installer, users are expecting to download the free Apache OpenOffice but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Software   (signed by Cpc Net Advertising LLC)

Product:
Prog

Description:
Prog Setup

MD5:
64ca30f117a0ab5dc397916da75ea9d7

SHA-1:
ae716d101a0c404dda8194d222c1d50c71117b2e

SHA-256:
dbb42ccef327def9209f767719fc9c574d4bfaa2b2bbefd0035b67e52065e4fd

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/24/2024 10:39:26 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.CpcNetAdvertising.Installer (M)
16.1.30.12

File size:
936.9 KB (959,376 bytes)

Product version:
3.0.2

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\install-openoffice-2.exe

Digital Signature
Signed by:
Cpc Net Advertising LLC

Authority:
thawte, Inc.

Valid from:
7/1/2015 2:00:00 AM

Valid to:
7/1/2016 1:59:59 AM

Subject:
CN=Cpc Net Advertising LLC, OU=IT, O=Cpc Net Advertising LLC, L=Wilmington, S=Delaware, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
2BC1DD7AA35DE89A0D5276ECD7AE32AF

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:YJ/p+GXEhgJdYvzlOCerBhHfKVSNg1qtEz2nSLML9423mL8QJk6ZFGRjmOtYfqoa:YJ/jXtQ7iDKM12zF5k6ORjFCJCkj6

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file install-openoffice-2.exe has been seen being distributed by the following 28 URLs.

http://www.straightarchiveslist.com/c?x=l4Gk4YMkA27qC61RGasQIlDo06CLBTyO2SjisejjIxU=&c=8hHYeiMxZXdbJ2DPr2zn7XaS8Inf0XsrY6wSMNoLwOwTg3ixlDi2HrwlGcP0zSBbVG9un k/.../qkUDA1sz0 sYR2MOBpu0QIXkyz2Qn48S OhmKl3n LLGCTQKJG4&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=EBvO8x9CVWgcVB3oZozV80u/0mP39SEExQWHo8/AcUA=&c=XhVYOioMM1peQUJbZ/BexzN5jjg7wTWu6apiqT7tQ5hY8Dw6fUg59HtkMyNGXheIcWvQL5TtVPEkezu4Jl2yO6kjAE0i4/.../klCfsYh2VhDLplvdc76LCyrqmdTHT&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=1mJrMtTlEqBu2hec4fN2uFLz3kLZ5EDQRZNyuWNqkow=&c=aoFvLvYYK55kxPKExBLlLCTZ7QgI0bi22KgDIsVUWwrMq3GV1wjgudP/.../W0FlnxR9p1wVZvPBPe3kZdfKGCE72tvRzJN9gvMIGC&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=/AbWxL4hHk7ep4yHa0Y17khrgEjjPwi7qi6/.../utMmrUv1Xi95IxD6EmvIiZxpHACP8yNB6AiEsMarIRrprL2EIE2tWBT3ANbrR7A&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../nLgiGmA8RhkJYxSgpxAeY19XJ25SufzI8regynkiInNfeTpRQxqZyiIHvxOoriB9Y45MYqOqcZhLACZloSk&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../unR E=&c=mIEcrJ 4RlgchtllTVmPYCtCZ1b6B7W7KJxiy9LUoVbRSs7KZqiJj8lQw464rhaLcIF8Fhil6gxJScFIJ09nZbKECdejCsLypgud7DWT0i bogkTqL3nVOc9MOfOPaox&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=sx2Le1xyFNT8HYLR LL9/yMwEwcPDspj0ptkoSgeWts=&c=Zj9yy8MGIigEjncKpYucmOfuh0guX3/K1LOaUhcbuPcEvTJEOI/o82/.../0t7t9fO6dHR5nbqzFgFlLUZyvcS2jOsfYbkejxvyfpikKN41jB 9iGQ7g45aR50D&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=HDGeidepmEbofE6igpqU1RQcXhC9PRmfyz93mwQ3NPQ=&c=4Z92isOhQKj5ZZ7CmyG3TeKwn4HZBOj4dR oTQfK6MRy01mYlDYI3WPz 01ixd1PzB23yCikISWh6n5MVVXR Sm10s8AJvf1tPvSSAk5pw835xpgeFTIXvmMsIuAluG7&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=jZB7jcLojAXon4RH3I p/rauaGmlyljGFRdO kay2/.../FIxTSv9DZV LSdKsWBWDxn6hQaiMc&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../VCYxoviSJcxP pc6sWjbkDOts22rsQFNu9paRT6jQqChZ5RrsGexOYVqQcKuMuynJU1LO90ZLXKkA2LIdbDwNpXPDAGcL&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../2JLhk2unUaY=&c=Eosb8TYKn7ja8XoGshaCIJZD7H3uvGVWH Z8GYHxYeD1MJub PXrRqi8Wi376dV2nhR rYnaKA2ITHQtnVzeG7EHdJJLPnG2fCwmbP7vlP1Juz6jmZU0AMjUE3zpEiz0&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=JDBFC0CoO2YKM3Pccefbm/PU44VM9l76tWGQ5TbDnHQ=&c=00B1e126rSIZT/tM9z2naEYPmgTPonCnbHjunEq8XLrwLokajqfN6KuPBK/.../DqT92vk6PjQrOxqpEdriuhsM2D23S50GYEiZyfPUojE 7Z&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://cdn.adsearchesdownloadfiles.com/?ic_user_id=745&key=tA0dyC1zkXJcQwUjco8HBI4EwlTORblzGpEBjLPfnLOXLqJhyGvNGrivM 9aRbFyELo4GMWNLnEs AAVpgTtoI4ueWNqocioy/LpBmdtiiFe3BWv6g9vO klaf2Jz5G4rrqBfzoVA1VbAlh/VGaT6bYRLv0BV9J3pXOyHthPJdWEVJnG ca7aZVGwJS5gs5J6mq8f8hLZU2letOIEVepfnA0oa1Ntm/k/0GVIpI Uv1WobEFv86TEsoUBugs0KUcrkRa1xA fNzIXchaJt4opPjTmjk2sOg4eMHbS/HFr ufLpVOzV6gF5ioSfXQklsAn2KpSKIR3Dvio1XxyOoDDw==&data=gN4T3DCK8sQXlkcHTnZR6O0RYNFQpH45w1CT9roumXl1C5v3U8NDOY4UinX9mEJ4p1CL8Q7xmH5EfkAgBlXZ0TZo2W0e2Mc e1ysLSXZB ER3PyvnCU2/4NfqtAW0pGbDnOMl61Z1SVgUrjWV2k70v7/tf7tnD7rrjn74zOClWEjt8TAH9ORlqIaPa9iWQxgPa6wOx/oA1Osx1XkwZFwiuF8UEaNXbZyCRAQ4qLYsFRhQbKj lH2ETTWjlqO3Zw mo4JjfMU6aMnvZDLq2aEib1qpDY9Htw tO5LQzDNdMMwt 1rg7/uDRbtqgA3gdQjxY5GTpgJXRc6yRCRHgKUhbnptkzml4HUqfTFH/borGU EM1yQNKfFTSHwrD7K p3xb9o9QOioKq Lrm54K5U8s7IKg2 FU96Z/.../Jee5ypfoM 4FQR7XNvf71YqvFoaWAhXQre nK4XX783Q2YqNJ34cLsAnK3ekWThP1gNSyXMaYurkFFnX0TaIJqUBAqAWRxevMryOmARMGOogncOwxHIbnWHFbg4InDT vMyYOddyOHgeqPXd7 KxLIg6Fe

http://www.straightarchiveslist.com/c?x=qtxLZvtO93BsJ5MeV5ZHVIXjV6srgT4WQSlA/oO6RCk=&c=s2hWe/Ck7a88lBfwGP3WQlfLcFtpABOcj2h3hOrLvP7kgttdb9yQlNJCAYe yhi1WtXgBxct67NhvXIzhEBAjEFA93P4ggH5RBa8nFO301Qy/.../&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=K093OH916nZynz3gqMj3cfEl912mvqZtjsH/OnUYvfc=&c=SB8gWkU5PY2D0pX77fM12GM9nntSCv73/.../V1HlGAFabvAUViTR75yKk4x3nuPs Jxt85EUwfFG727iQow10Dw1bDMyLJv cvM&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=hEZvNV BTOv/.../1Hhgfd Y05EkLYwzB39zqvyanPFW04MapN4e8ffWll6CXAHzAbYQcbm0o4Y6QUYHgncdUwzwxOaRbd046un4JKCWacaVKuizRax&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=vSJeKA QcrEdvTmyxGvVkZS63IK0DrJ2smkJor920ak=&c=hX5u0Ughy/4 DZPvnxk5I82gdSgDCKZ1uMsS9BW3g6Orrsd320QZAeUXUIQa5wHwdnuRbEz/.../pDgOvWZrsRDl&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../htRak84HdFir5EOOoydGzYWJg=&c=ZGXDNWHn8tSBr j3ct9WXv36FRzk0ydkhdjQBsJW2afJ4TsmWpIbU49BOKXOrc61Ghsusqi8MWNvV3cFbBvUa35a15VjUnLqqBFWPw6HPrPv0F6JcxDB3LmWjyizqAe7&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=qpkXiYD6wZSWmmhVr0iaGC8NMYB4oNrTRiwNoxZrRsM=&c=Mki3 UtWeNfoFPKsmGVLs/JCbZSerqf//.../jbG3iQ2ns8mYHhj2ZeX9PVhLyTJZfLOPqGlvXLiQ2ztpd7YzGR6T0rFkElWNMdqYhfgMIyU7r&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=EOVReUG44PJnlW7Tq26moMV4O5TNpsWU6Kxf33hHzH0=&c=h0Pxs7NYIglbRpAzZ/Ag2ZjXPWemII5dfgydyOVvc/.../LHnjd5HZkHRIEwBskx6x2uarc4DmvpSm9nOL&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=0PAwMeRNpR2oEQT1axKkeAdfkcVOMg2oBGxxV5a90Co=&c=Y/4EdxRal77xWnmq8EznyJSuBLnnCugNdYRSRDOcVe 6oK7zaXAtEvJD6Rd/7DoKgEc/.../wUAnekdgPAUPa13 lvDY wcALdbDBhEqA6JpzZhIXNXOvpVfgF3NDv&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=Eho5p6Y9c3clu zXaydcg 2QTQaqz Lzi92xJ/.../UR8zkA8XIaFHESIQZtub0BFUzHKZ2Cr6zeqi7zexQH b7ttUZM7Qi&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=e5dM 5f/.../ALFhICKUCxBxej1rD8OLxQBQVamrtJyIENkJgC0yUJFCQEMiB9MQ&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../aX4Tk1QTnWDB58hV&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=vY/0kjVMR7YajJ/V4Q PWs4Rm/.../ 49yYELNJxSAcCisTA9LU2Fvo5W z2Ta3grx7eRVRZpdfIK2F3qKUdFZufcFXf2fRXMfYUjRFICjHNKy0dIgl1wDKFQ0HglwF9hyFXoRHkw2JRW0&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=VBRWvdNPmwTJdKc7m6CZlph ZHlZs2mfXPsoPxOXKSU=&c=taQhujXWlhlLvk1NfIhvOcYC8ON7 bIh4hc2EZOs/.../BtirJfvDjjE9aMpmQfOEoHnf5l4mWJ0m4g8ElQt wioX0o&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../kmsz53EupT24FXNzV7 3b7KdKq1qW56a EvHHdq4lAhHCovFgY7TydrNLk&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=FG4fZj2FIenTFz/lsB8oY6dqkJVZjU kdlS8vYceuI4=&c=Mkfr SqiI5j/z9/.../ZIsW78sVRG5BT4T39GNpoWcZa0q W&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

Remove install-openoffice-2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.