home

install-openoffice-2.exe

Application

Cpc Net Advertising LLC

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application install-openoffice-2.exe, “Application Setup ” by Cpc Net Advertising has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The installer is marketed through download protals and search ads as the free Apache OpenOffice but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
Cpc Net Advertising LLC  (signed and verified)

Product:
Application

Description:
Application Setup

Version:
2.5.1.7

MD5:
c043b8df0407b9a63d1be7423f1d7a20

SHA-1:
c7c1d59ad57512fb593b3cde7d212c10508d279a

SHA-256:
8cab57896cc947b8e58646f1ac733b0463e0030b31411fd08ba6f4fd94088c38

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/24/2024 2:47:42 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.CpcNetAdvertising.Installer (M)
16.1.21.17

File size:
924.1 KB (946,232 bytes)

Product version:
5.6.7

Copyright:
Software Application internet

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\install-openoffice-2.exe

Digital Signature
Signed by:
Cpc Net Advertising LLC

Authority:
thawte, Inc.

Valid from:
7/1/2015 2:00:00 AM

Valid to:
7/1/2016 1:59:59 AM

Subject:
CN=Cpc Net Advertising LLC, OU=IT, O=Cpc Net Advertising LLC, L=Wilmington, S=Delaware, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
2BC1DD7AA35DE89A0D5276ECD7AE32AF

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:kVJqOnaqaRPEaxttVDHEvH8i+wkdwKetHpLSPdOsb:kHZeEa1V4vH9kuKSpwdxb

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file install-openoffice-2.exe has been seen being distributed by the following 29 URLs.

http://www.straightarchiveslist.com/c?x=GXlJm3hAT4AdGGCrRdCfTvazujuOwcF/hqtfRuGv1fA=&c=KBwyU1nQvDSB8ohfWf9S6MXqpRO4FzcFsMgkJoSiIYNkoAm3e4B2H3tZgcDA5rnN/.../kM8ZLkdrB4SZOWjp0&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=q6doQV1P8OyZp1Gb ga 0vxP9PQ5RvI Z/ w223CyCI=&c=YIkcwa22dMp MkSwf7eRp0XSMCcngIQk4JXKIXxjKgeilIM i41CboEHmrqt7wn1y8jeAuVWknx 3UeG0iKlfaVIZLJO2VeB/.../&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=Rum Rd0VhM78LJlZFVdI8pT4SWgV/t9llRywi/mx9Q8=&c=4S3edC/.../dDbpp5Zw1yI1Dw71Ri0E3tUr0QDI2swH5VDHFyT5FWAZVVvcyXvvjObslHK8PcAsychV&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=VFxVf37q08iKsJTNRNy5vssokSqIuFZt4rWBspPOd/k=&c=eg0kwU/.../EFA8SWJCcdJk34xU3968YGbJSKd4OiytbEZVy6s2KB9f51FOUGLfsMeoGcnshWJegyGgbgpxgKtIAbtxSRsZ0eAigrm0ri6BT 8TnQW3J&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=sPJOm9EGcRAE5vp T9mYD4a/9wyK6qFIqhYOn4Fm9ic=&c=3XNOQUj6ByW1nFwU/9PyOibbXiORnYet1nXNC2g/.../nGn91GHfdrYvRp1Wih2wlDFh8To1NDLHpB1ZbFdgejhBmL7Sgpg&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=6oO81tvhbjs5MygsMj/DUDDsk48ufEtydGqjwpYNXSk=&c=SxS37gy5P5/.../dDadBJ7D9yytyPHz38TCaB8pwzYp1aIWRtoqxw3XFLMLqVC0Q9mlqUTlj2XW3E5MRCuJLkiFLwVzerS8Dmk8i KV2wmN HeXLV7N53D h6qqM5W&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=RtFfTIdhy5VQ26wkawVx2l9YgPVuLzsnQ9zNVDZcvKk=&c=PoQGL4jazrShVKBqNz0OI5VLFUxqo3m97/.../nzIOWuvMyXtYHRO UFq6xuoKmnhoo1Hv3rW&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../6GEsJwVTrZs4dAmyrXpgcjhoolHvNjAtwMz9pWDn6Lt56Z2m9W5F17RPlhT5J0x9WRCjlTY Jt2KewNYhffZCD4niwdXfXzy0Y9PbseHR5z5jw3S8&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=VBRifENNy3K0D0lrecuj1gfpez0/EkYXcoDVCRQQLz8=&c=QpvWFJWBlARYhGrUg kWi8K4KjQ8xpJ2g4tD2U/.../JDHcbecu6mmKusykoj8xjt7oO1w92FeGEzxB7kuTXcHn5afmZ74omZuoHdJ25qiCUoG&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../c64FFtO8TYTfYAkp03U4c rgFmC0Ld6GdwaUafpqHfpBrJe1Kqfmin yXzcQz1JxD&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=uKOg7l0VMJ g15iLr7n5gVk49ZMZKcd/.../C79Pz&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=ouk873xGvwmFhMB9YdJONmK1e4g5OMnd4jO4rD4wZ/4=&c=03JMNjl4UbZUHalaFPVteJlrj1jd7wWQDfXb3fAALCe51YGDMUt2byVtsxVNLQ/.../6DuTsqypYjsBBIzJcBQtFI4JFWnK8lwEyj9SOaDcfg8Ov&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=qzNLgGjtguG6kji3NuZ5T6rZH5ibj4I2TsTw4F8mZ7k=&c=ikAtm 9l7h9Ew apXVXxfvPoHJlGHbd27Has7bFLf3uDJLO9QCANm KxRnH/.../N5zv9XjOB3kMrb&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=edex7E4AZW 9BUGzMUTHSBTHLM5rYLXRuLFWQ6Bh9AY=&c=/ff6LrHCytSeiq10oSwiY8bNiuLxl8JufeylBii/.../mRrig2a9pJKpBCgZD7GWzKjUgVPlBOBasPLH&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../K8tt8AHiJt4S1IxN2PQS0JbzNX4Ud3hGYq5k74orX7MYlNjJgRYbaJbRT2IvinPl1yDv3178&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=jKZ3gcuFp4Db3T1MiNwyzalgk829pTynT5Y6vfxxV/.../h0M5TleO&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=YwSfVLF7LaWh3EuhL4Drli2cmnl5Uljdy 5z2B2lVqI=&c=R6a9/goPZ1JWdcPxf/H3XpK7 Adjl9vwUpfoEVwbstPBq0vM0vH/.../9NwVt&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../qETfT6zwQxNvMbzC t3pkWfYOF0JGCzNfA7aKprM0PHWVFbApa2uR5JG61kO2pUIaCTzH4Sk952UwqW5gVYxk9QqPMLY3&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=6fsR1feqWpvSs0Q2LR/.../hR3etOLMRdI4wDFTAB4NXt9zBxbqtIDFw4&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=H/.../jdaiq 2NpZHMnSKWpqQj B684Q4DIzeuaHRslm5mNIRfQUSxYEmLRAYfjo ladW7jgugR9Tj2X2jpSst8 HUkUlFWBdr89MzYIbLG4vBDS&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=DmSymRtjJe6 o gLUpY 7/e3i1IObHF3vsvwctyQjtU=&c=jYcB dcXW/.../ZLl4NpXweKrxeMSpQc7jqiDXiYLjc2ctJwSEahV93aYJGRw6k7nKRJGzhtBLauRnIMFj0lwd7fLtut5nIQAiA&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../dzQBfLXBc6U1HD&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=gCehI0p0qTCDJ6QZvJrxfJD4EJ29zLzYaXXX35Jhcjk=&c=WRPJxssgrephzarbZUlLrFXRcOCkPWF1WQWdH0OsoF37kYw5M2PZ0WW7qd7mNRQd94h4nCxkqdjLw5/.../fU1umzKzKtMZEVf5QeKizTBEvHZ8 3Ms4BF2nfxd9Pk&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../dSYY51G PZ8Kc56xBkBldhNkMc4th47A0WEtzDnfC6OH7WasnkgP0JjzHZlsyo7U75mTjTTIxZEWVC kg3LzVkRsom1&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=tnnmiKkkrh3hlshDqQ5E9XeL4G x9l0Z5 ZRF776k/M=&c=0EfLwgySSL3yZIzu6zHJqNrI0NuT0qHxE22vDrUhKe1FX1y/.../ZnCct1Ss9BDvVqicP5MLMOyQfuAgevBEYQma29X5KB4Y1O8nQXgVDWkgAbE&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=AyKP/JxHsoXFVhN73hUzvk8WOMpaM582nzGVU4ZFvtw=&c=i091G5RSCHFqdt RyPr/4pcPEFrVwPtOuUIeF2T5984y7Q3/.../aayr89gax0iJ0Ab5pzun3Dqz5uwnMZn9p38iUUwX2Pl1 ON943w9cPfA79ZfoegU57p&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=BejvlBL0UL96H0zMr0ml9JeY6doVfGCniTlf6OjFrLw=&c=8t/efQoRUyUIuX4mG7Y9jHBjBrHgVSOdyIJB1Sjj I yQNbxdBsRStfu7QBzGzfQDdeGhCf 7CU/.../T979hTKqHcpsYP5qi12KtCZIDc&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=L7oYNxTFD0t8R2AOm4KboqJ/AlA0s5HXGe9e2ujDb Q=&c=siesLLO0lzry2pAfUfSMVj2VyuacyLrvZbGVAhf4rLwChBuIsk/.../QMrJk26RLqh53VFOVBLWJG1k9ISrGHGQZF7sWsIvx&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=8PjuyZWn50D8/.../UHwON7q9RuNcLiXeqUMmpU5uutJy8ASIMjciIhWogwi4nTaefY2aOqCIu4z7AFyIfpJeO0cQliJ7cM5tu42Omzh2pSiP1SMp92H7rSsf5eGx&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

Remove install-openoffice-2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.