home

opendns-updater-2.2.1.exe

OpenDNS

This is a setup program which is used to install the application. The file has been seen being downloaded from www.opendns.com and multiple other hosts.
Publisher:
OpenDNS  (signed and verified)

MD5:
0337ad7537bae96106d34b863049ca80

SHA-1:
621bb64fe2e567dbaeaa197522cd26dc5d03fbbb

SHA-256:
f806b50836914731b1d5a5611b4f497191d097c58a728dd8129b29c7fb66fa25

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/7/2024 8:37:32 PM UTC  (today)

File size:
220.1 KB (225,336 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\opendns-updater-2.2.1.exe

Digital Signature
Signed by:
OpenDNS

Authority:
The USERTRUST Network

Valid from:
4/8/2010 8:00:00 PM

Valid to:
4/8/2013 7:59:59 PM

Subject:
CN=OpenDNS, O=OpenDNS, STREET=199 Fremont St, STREET=12th Floor, L=San Francisco, S=CA, PostalCode=94105, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
7680189BD7F3A03993677393F1F067C7

File PE Metadata
Compilation timestamp:
2/21/2009 2:46:34 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:sYg4pumJ6oFy1BZKFqAQNtSUkTxHyAKvTNedFOBkWs3LekSPPDQTIPsQo7P:slnYy1NNtexHvcNXqWsb5+DQUPsd7P

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 05, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Code size:
23 KB (23,552 bytes)

The file opendns-updater-2.2.1.exe has been discovered within the following program.

FlashPeak SlimBrowser  by FlashPeak Inc.
FlashPeak SlimBrowser bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar. Once accepted, the packaged executable, ConduitInstaller.
www.slimbrowser.net
About 5% of users remove it
 
Powered by Should I Remove It?

The file opendns-updater-2.2.1.exe has been seen being distributed by the following 50 URLs.

https://www.opendns.com/.../windows?__utma=80776322.1264265613.1460405403.1461489374.1473799318.2&__utmb=80776322.9.10.1473799318&__utmc=80776322&__utmx=-&__utmz=80776322.1461489374.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=91528851

https://www.google.com/url?hl=en&q=https://www.opendns.com/.../windows&source=gmail&ust=1484761803253000&usg=AFQjCNFYBkal2ANPq6rgnod6Uzmpl2hYPw

https://www.opendns.com/.../windows?__utma=80776322.812367968.1468474363.1468474363.1468474363.1&__utmb=80776322.20.10.1468474363&__utmc=80776322&__utmx=-&__utmz=80776322.1468474363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=166024759

https://www.opendns.com/.../windows?__utma=80776322.1771481754.1443648871.1443649129.1443649129.1&__utmb=80776322.40.10.1443649129&__utmc=80776322&__utmx=-&__utmz=80776322.1443649129.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=187921697

https://www.opendns.com/.../windows?__utma=80776322.504223606.1482017792.1482028374.1482030621.3&__utmb=80776322.1.10.1482030621&__utmc=80776322&__utmx=-&__utmz=80776322.1482017911.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=163205557

http://redirect.viglink.com/?format=go&jsonp=vglnk_148612155673813&key=216b1420c6a6c8cb4832eb40987dfb59&libId=iypqbuix0100gkbv000DAfkrxhm8m&loc=http://arabhardware.net/forum/showthread.php?t=251379&v=1&out=https://opendns.s3.amazonaws.com/software/win/dynamicipudater/2.2.1/OpenDNS-Updater-2.2.1.exe&ref=https://www.google.com.eg/&title=?????? ????????...??? ??????? ???????? ??????? ?? ????? ?????? ??????&txt=<font color="#0000ff">https://opendns.s3.amazonaws.com/software/win/dynamicipudater/2.2.1/.../font>

https://www.opendns.com/.../windows?__utma=80776322.1239709455.1480470650.1480470650.1480470650.1&__utmb=80776322.17.10.1480470650&__utmc=80776322&__utmx=-&__utmz=80776322.1480470650.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=159227443

http://www.opendns.com/download/.../?__utma=80776322.638445626.1475931802.1475931835.1475931835.1&__utmb=80776322.4.10.1475931835&__utmc=80776322&__utmx=-&__utmz=80776322.1475931835.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=187872929

https://www.opendns.com/.../windows?__utma=80776322.1528694273.1465567933.1465568014.1465568014.1&__utmb=80776322.2.10.1465568014&__utmc=80776322&__utmx=-&__utmz=80776322.1465568014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=154320433

http://www.opendns.com/download/.../?__utma=80776322.1166777380.1371123536.1371123536.1371123536.1&__utmb=80776322.8.10.1371123536&__utmc=80776322&__utmx=-&__utmz=80776322.1371123536.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=195780261

https://www.opendns.com/.../windows?__utma=80776322.2011174625.1476744262.1476730394.1476730394.4&__utmb=80776322.0.10.1476730394&__utmc=80776322&__utmx=-&__utmz=80776322.1476744262.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=153255601

https://www.opendns.com/.../windows?__utma=80776322.563221304.1471845036.1475814514.1475825518.27&__utmb=80776322.2.10.1475825518&__utmc=80776322&__utmx=-&__utmz=80776322.1473079494.9.2.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not provided)&__utmv=-&__utmk=132430087

http://www.opendns.com/download/.../?__utma=80776322.177584432.1466215525.1466215581.1466215581.1&__utmb=80776322.9.10.1466215581&__utmc=80776322&__utmx=-&__utmz=80776322.1466215581.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=129137285

https://www.opendns.com/.../windows?__utma=80776322.1056588898.1468692015.1468692279.1468692279.1&__utmb=80776322.6.10.1468692279&__utmc=80776322&__utmx=-&__utmz=80776322.1468692279.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=98801047

https://www.opendns.com/.../windows?__utma=80776322.1200484603.1475975114.1475975123.1475975123.1&__utmb=80776322.16.10.1475975123&__utmc=80776322&__utmx=-&__utmz=80776322.1475975123.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=87192081

http://www.opendns.com/download/.../?__utma=80776322.755810861.1469548244.1469897136.1470781090.7&__utmb=80776322.15.10.1470781090&__utmc=80776322&__utmx=-&__utmz=80776322.1469548278.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=99777943

https://www.opendns.com/.../windows?__utma=80776322.1026637997.1473918082.1473918114.1473918114.1&__utmb=80776322.2.10.1473918114&__utmc=80776322&__utmx=-&__utmz=80776322.1473918114.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=162905397

https://www.opendns.com/.../windows?__utma=80776322.1145903359.1467131649.1467131714.1467131714.1&__utmb=80776322.6.10.1467131714&__utmc=80776322&__utmx=-&__utmz=80776322.1467131714.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=128802309

http://www.opendns.com/download/.../?__utma=80776322.1172048518.1452185276.1452185276.1452185276.1&__utmb=80776322.2.10.1452185276&__utmc=80776322&__utmx=-&__utmz=80776322.1452185276.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=124018051

http://dc728.4shared.com/download/.../OpenDNS-Updater-221.exe

https://www.opendns.com/.../windows?__utma=80776322.940998701.1474340430.1474340668.1474340668.1&__utmb=80776322.3.10.1474340668&__utmc=80776322&__utmx=-&__utmz=80776322.1474340668.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=154762673

https://www.opendns.com/.../windows?__utma=80776322.409750160.1446227788.1452334197.1452435515.17&__utmb=80776322.3.10.1452435515&__utmc=80776322&__utmx=-&__utmz=80776322.1446583028.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=124115587

http://www.opendns.com/download/.../?__utma=80776322.793268878.1476204733.1476204790.1476204790.1&__utmb=80776322.7.10.1476204790&__utmc=80776322&__utmx=-&__utmz=80776322.1476204790.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=125541763

http://www.opendns.com/download/.../?__utma=80776322.427015623.1472314436.1472314499.1472314499.1&__utmb=80776322.2.10.1472314499&__utmc=80776322&__utmx=-&__utmz=80776322.1472314499.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=129667717

http://www.opendns.com/download/.../?__utma=80776322.1736999994.1449294664.1450327684.1450414111.9&__utmb=80776322.2.10.1450414111&__utmc=80776322&__utmx=-&__utmz=80776322.1449294664.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=191190691

http://www.opendns.com/download/.../?__utma=80776322.1723607360.1472487682.1472487703.1472487703.1&__utmb=80776322.5.10.1472487703&__utmc=80776322&__utmx=-&__utmz=80776322.1472487703.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=87840273

https://www.opendns.com/.../windows?__utma=80776322.826845308.1455384757.1458601488.1458601488.1&__utmb=80776322.10.10.1458601488&__utmc=80776322&__utmx=-&__utmz=80776322.1458601488.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=165960119

http://www.opendns.com/download/.../?__utma=80776322.1005971954.1467414737.1467415948.1467415948.1&__utmb=80776322.17.10.1467415948&__utmc=80776322&__utmx=-&__utmz=80776322.1467415948.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=201561752

https://www.opendns.com/.../windows?__utma=80776322.993773693.1453506411.1453507023.1453507023.1&__utmb=80776322.8.10.1453507023&__utmc=80776322&__utmx=-&__utmz=80776322.1453507023.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)&__utmv=-&__utmk=192125219

http://opendns-updater.software.informer.com/.../

Latest 30 of 99 download URLs

Scan opendns-updater-2.2.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.