home

install-openoffice-2.exe

Program software

Cpc Net Advertising LLC

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application install-openoffice-2.exe, “Program software Setup ” by Cpc Net Advertising has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. With this installer, users are expecting to download the free Apache OpenOffice but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Prog Installer   (signed by Cpc Net Advertising LLC)

Product:
Program software

Description:
Program software Setup

MD5:
d59a9ce2359069c55f42e5d15fe42946

SHA-1:
d4163b42b25bb3175bff1c939bf92da09d001b5d

SHA-256:
c07b536ef27bd58f6f432e4b890762c567f8924b9370d882b7e7bbbd76de6386

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/24/2024 2:42:41 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.CpcNetAdvertising.Installer (M)
16.1.9.1

File size:
933.1 KB (955,456 bytes)

Product version:
1.2

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\content.ie5\es5ss4tk\install-openoffice-2.exe

Digital Signature
Signed by:
Cpc Net Advertising LLC

Authority:
thawte, Inc.

Valid from:
7/1/2015 2:00:00 AM

Valid to:
7/1/2016 1:59:59 AM

Subject:
CN=Cpc Net Advertising LLC, OU=IT, O=Cpc Net Advertising LLC, L=Wilmington, S=Delaware, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
2BC1DD7AA35DE89A0D5276ECD7AE32AF

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:PptqS92Jok0GGDVQphycNIhpg8WNdzo96n7pNnX:PPSakaVQpMcNMyfG67HnX

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file install-openoffice-2.exe has been seen being distributed by the following 27 URLs.

http://www.straightarchiveslist.com/c?x=JFHSA0Yd2IVt3YVcrQU3AuAg 7WO6dTfAF3zAORFi7Y=&c=Ettg16ljCEu6r4ftdKwPF uP30IZTZ2iyVGGiCIS46iA9VpMHvd2/.../z 7Vk6BNNk1CbZK9 1HpfmVHxBdR266Do sg==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=Kwh3f9330VNzA2ud3cUDn/4YfUco8qk7/YUsRup7N w=&c=d0DMhY1jtENMP3jVhHhBs2UvBGuJzbLwD0uOwp4SFLJAlHKH3563HdxGRPlsmEerWms4GV4ba2HNgBsZRf/.../xcHuPSe2szjkTbnsw3bYUmt7WRQrNtVnJH6MpwzFw9ICOmw7UDrw==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../GM=&c=xKrMSJsaX8hF gCe zBQIwNueoYO7WLOHltZ4yUA31HaWV3Gsvuxh7Z2DNxrWB0pUYxYO xPHLmYz6KMOivwNrjbDNrZyIueadXqXwS5NJkndaX7AlHVjsZ3MmB qb5iA1LYniAz9OZJcbG7LA0J0Q==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=pjoU79rqEKOX0JYUhfGxMTni8Ipih3/hY4v8JCpjPiA=&c=gEonv8x Kr yYJGnV2auCPIOKudpXXEfpsS3V3HQmTZfeRgjs/Tl6kYaHqSAXA08cx8FgsBKLeoGKs4BUvSNdU/.../gz9AdMFfMg23L279w==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=CRYCvcrWoTDkTexSackS8stZWiuA0y9SSvUbrirjXFo=&c=vPUMRDAiajjxh5/sIM5WGkLX3AMSAVL7X7XZvtUr DyjA6JymRJyxP/.../R925po7pslzbel8V4SOytE26d6rlWHX1Lh9Svj3noHiOEULVUsjfUiA==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../ALKb5f752V4w==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=w XB9C0x5io6wHMRKwFACwSHm0dDA63Rc1T55ZqcnrE=&c=9BZHDFyu7OsjBsvvTrcKjvZitowJlwk/.../NiQ==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=4bK4uPYpdhwCwokG0Tfw9/lkuk7El87q5yYiLi3MoAw=&c=j8LaoWLuh5MNSwQ1SABR0KCwxdz/.../JbCNIGRFDVA 9lFm0CJ8uK7 HOQ==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=3SpWeiIZIma8ASW/yrHuas7O71Ih10//GRIY1mTbw20=&c=GqEKLKR5PbnB3DBGFtSwfuppvCoPOlif1S8fnTFhumnj0DP8WufFJAxT6iN0a11hnPKuaRod4v9P1onYNiOb191ZMeOveXoKheuIiCftAODewEkOVIAI11XbZa6dFF6D08ldHWLMJaKAbMw77AWqCg==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=10DpPIDcAELuYaViAj38XBXf5YtOcyLV44BKHVDTt3k=&c= lAD2KGNSBbRQRZa/.../IFvBA3TgQW sCNixP8xD9QcIRLPEgvrAQT0nk0IYPg==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../3yjo=&c=lpC9bySNxOyCVinTi1auvyF4cChdz4moX2GTUqyKeKgdhRq64HAT nCtY4xKCvBAJguwzjr9S9D24wyGmyXX74LC7gRNeLvFYTum 2JeXnM3Grr2FhpS1705ZytzSbuPkQ04YUQM0Q5JIUVt8XDawA==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=sKnQMWJeiJQ/.../ c=&c=iUh3t2SDPLZ7gki5omd789GjYNtqifK6h8wyme6LDjHdgaescJfv99t8sUEmM6yOi hBmUZo9cSPHkBR pO5ClvIliNRGbhzt7fFlJm0 HXXelw8TBBvaaI0PYdDrixvBBJv0aQzrF2TxWfy0mDiEA==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=v2pV5wj31R3/qVZkaaidVGv9pKwRVRZOeByTBsvtDqY=&c=BpI/I2s/hzNq6NFU 6xPO/.../S2BKuuosLwrbCs3ZWXF2Boufq8JpCTCZhrcgoVc5e6uL2O3AlOHNz Fuq3ng==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=q8YT aHVoO4SOtv7iPlw6JN7CsNvC1N8TIrVrfT7HZ0=&c=CsMmKJMAkl7AivceUmH eyqPAGpSEuH8vKR8hbCawNstgaZtABf baY7ToDZGmoS/G0k3TFwh3GSs82Krhc6lLsjdh6iFcJEve8d19s/.../jPYYrTnr4oVx1Vqh6Cl5yIeFr5lpeseCZkQG59myg==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=2/MiHbFYuc6ftf6taiLkys6FR7uacgggcucB2SYM1Zc=&c=DIm43VgpT7s3WSavjI2S7r/asr1/KpWss8ks0r2fTtzVB293s0wxo1H/Tj FpTQWJHhClDaT /2/.../baWI1cbtj31oGGhnREWGC2cFXHizf1HRVPymTPA==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=8BlJKMa0k ha7bViJIqVZmS1V7kGozWjcV3bgZu9wdw=&c=BNfo1An7BT165islR0Drbykj64PY82P3pTb3R7IZdzpa8jc0Ral4ZdjPE6BY7eIYrmsRyqSnF3CnSWiZdcnZ vijjwIkXsnTGd3fe j B/.../mzg==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=/K7T7OnI3axXPVOcNJ00jNNbzdMTmLzxjaMKrKFdEAY=&c=j/YDvB5JalgzSgtcfATDOUsIJy7EQBWBrf40MHbuh7FX1hb0fcPP6g grxXBQcemJaGSlGryy bY1JK/p9OyxgeCOyqgXAtdf8NEwEmeIh5u0AMSJfQg0E/91W71nYTlIP/.../VJHspIuHDuvQ==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=3wrq374G/sIyy1IdYokHIp9kYm0TcmiZ/Upf5H tpUw=&c=oQqzBAzFvQrVo1AQwfzYJMBUmj1rZfDCEgAnoCSo 8VrVkfV/mUWRszUGTbWn1hFuNejhUtoq/h5fiotZQ/.../aDsV8Gkmh7rzLbhgUy3xVsjphIcEKjRmKA==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=3pn/.../SqdQcbApFJj6ArSx4SgnCQV7KxWmcJEVRTsOVqjzXnu56lKSiPk61HP8LebGP6RWiva4sd3sTa Q17GfkfklgYbralszVfw==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/.../Kd8=&c=TOjRnFXwxaHN wiRy84hlJVDYKGVhXRTaMYpAtR6n5xK P9qrWWNr6GMBQ7M 5ks0nT1EahqxUZxtPk8AjlxbRNMaEpBy2fkF1bwzAEF6f1aLEAfpotDfNYUoxKCZ1yO3ITeU0HxaHnkqnw lWo 6Q==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=w7x Mwk6g4KaizPrbk0TM IH/VOF40c6Uex1O80nAB8=&c=gjMLdv6t20Y78TqnWbXn6S8/FpWugJdZ86fPXr8pB220mImmII1NGAk1z9UOmHFKrQhUQfoFq5R1iBurLGLn30eP8M1koBt/.../bF9yCOJnSrCebCGKRMIFnEH2rLXMkjedcthSoEGnb7Wjqhdw==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=auHvDyJF8vjhQ1MawcNzvxANsUCpbgp1g4ju/.../1oQf3jndMJStxO0wuAQLYFk1pOult5SGszs7705ZfYpATWC2AI31zUJNsmn4XT9cpEXl1igYMNmXtY1av1iRupZbTP7skwlTlUrVyMYHKiNqqzyUg2W RgMZHvnmpSJvD7A==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=p8tFD3pUH Lk/.../SwtcDATgnAIE 0wOGV7DYw==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=ONyoOKFOF T2bVkg1WgbMyHEU3VYJUne0 HRyBkD6uw=&c=6qrz1Qtg8UvjUSllYNjKj/Oq5CTR0d/.../Dgltw qZCn8V 4Zb4FxfJ1YVFRv2DIkQA 8ZvlsEQaJ0nwsh3lKcemTm9xIWzUHQ8oCKKwfbm2lAt5hFQSxKWOD9dOOQ4KlT2S2eqANYLljPgAw==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=ZN CEx/G/cGReySHidezmmMZL9viM9etoI4VW88RbV8=&c=uaeMUwwofJylE6pEmfXhz7jnIsoHp1S4nkTB3J7b9HE/.../jcPkczsvUU9qIqgjWVY4yzsuT6geF rQjxbNWeA0gj9ObvOomKTfqFRwGtdnb1Ww Lkp8w==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=gmBJKyjQdQ4qQvVrf2j2oHg9umSMiXedu9L79Z5wA3k=&c=wc2xsdUtgjd4snhMMB6KuWEx8gFRkqMI03AJr8lsL0Q6hVgIzcoAUMf2sFTTtPoZ/.../7wUIESdhpnglluHRtifZ qxr iuQiv27fXHDbT G8fZkYEZ26ZrOgww==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

http://www.straightarchiveslist.com/c?x=Ss25pNUWBGzx9fjRuVOrC9RJl6gpKq5mfkQvs9TEGhw=&c=kim9Cz4L9FbNE33KWo5fQW9ErCHCUBDWs/K5SBB0JBct0ZLyGTDGywxFaXcIFf8MQobyphDW/.../QMNdVZwtXx2BGgPGv0LSWuH6neI6JaYZCyQ9xiXOFNYcd2Bg==&fallback_url=Fallback URL&downloadAs=install-openoffice-2.exe

Remove install-openoffice-2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.