home

apache_openoffice_incubating_3.4.0_win_x86_install_en-us.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
089966f62006ba94e540a9bbb3e6056a

SHA-1:
4550b371b749ffe74184c85f5cd3bbe9c44a2f75

SHA-256:
b4edf758d7cb82d48beb5ca78069a84fe6a06f484f1012873500c0b6e7b34a4b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 4:47:11 PM UTC  (today)

File size:
144.8 MB (151,801,119 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\apache_openoffice_incubating_3.4.0_win_x86_install_en-us.exe

File PE Metadata
Compilation timestamp:
12/5/2009 10:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:hNbLuE4Hg1Nt9QwGFXLc5tGqF5qRb+2tJDZasLEiTnB+BC/EL:hNvuhwnQwGFXL0tGu51uDUA32

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9998

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file apache_openoffice_incubating_3.4.0_win_x86_install_en-us.exe has been discovered within the following programs.

Mozilla Firefox 13.0 (x86 en-US)  by Mozilla
Firefox 13 adds and updates several features, such as an updated new tab and home tab page. The updated new tab page is a feature similar to the Speed Dial already present in Opera, Google Chrome, Apple Safari, and Windows Internet Explorer.
www.mozilla.org/firefox
12% remove it
OpenOffice 4.0.0  by Apache Software Foundation
OpenOffice is a widely used open-source office suite.
www.openoffice.org
About 2% of users remove it
 
Powered by Should I Remove It?

The file apache_openoffice_incubating_3.4.0_win_x86_install_en-us.exe has been seen being distributed by the following 45 URLs.

http://gsf-cf.softonic.com/455/0b3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70944&instance=softonic_br&type=PROGRAM&Expires=1484388462&Signature=O8D~P-6m~ET8zOdfZd684yd1~tggFHNvREH4ALuV70em1ts3QQg9DCZ6EKm4~PtsX9vPNTpD7rLN329~FLzxf2hIXImYtRM4g-3Yx4zbs0lWTLeseA-dL5xlXHnF9iPugyttqSWNuW8VRRnXjJLkUCnlZ~0q0P7PuB4U-ryICOY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Apache_OpenOffice_incubating_3.4.0_Win_x86_install_en-US.exe

http://gsf-cf.softonic.com/455/0b3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70944&instance=softonic_br&type=PROGRAM&Expires=1473678985&Signature=F4x7avgv7piNyX2IKA0ZpEiL1oHudTlDoFZJ49GyM1l0cPOL2CrpGhITHAVPCS16CH9va4TZNTf9hveio2Z8q1shNeN1HtWyCVGcTgi3ZH97hm4QsKwZmZGqEqUb98wxwyuIPoA4~pwaBHVULI2jWokGI5lL7JcL7k~TSl5wfDM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Apache_OpenOffice_incubating_3.4.0_Win_x86_install_en-US.exe

http://i_ine-hn-org_openoffice.faurtdrtrei.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.fargutareflo.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.fargloretuid.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://gsf-cf.softonic.com/455/0b3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70944&instance=softonic_br&type=PROGRAM&Expires=1477495624&Signature=GuHkxpciGW~Rfzs-GGfi--SFKaphvCqCrj12PDmxYAeq3MlntNuelMH4vy0AqJ0yXQVIF52Ls5-7f8O8ymo0M3dB0BoDGUlm5wer8yE0yx1XUDEODPedh7G3iduSxcte58wq506pCM5OhuHCvOYw8MM1NRBSq3oiFgsbplrrazw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Apache_OpenOffice_incubating_3.4.0_Win_x86_install_en-US.exe

http://i_ine-hn-org_openoffice.fkiloredibo.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.forquetarefi.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.firedlopbura.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.firtaporedo.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://gsf-cf.softonic.com/455/0b3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70944&instance=softonic_br&type=PROGRAM&Expires=1444822124&Signature=S96Cluu4FxwaqfdtW4IytDR7fola6lcrkv3OIIo51JR7oXo9-A9F2wVICdGTaGwqzvRmA27SMENUht16JBwgBpNIo-oQx0MBdx1La~OK4uzSSiPChokRqR9fptncmNlr3VTNoQ5aWNO91SsBE7KaspGHdJ9mRnrjw2-ntFhFn6k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Apache_OpenOffice_incubating_3.4.0_Win_x86_install_en-US.exe

http://i_ine-hn-org_openoffice.foaweredimas.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.feziuqotarea.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.fareditrewiry.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.foratirewoid.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.fawedixarfores.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.ficgluretidas.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://freefr.dl.sourceforge.net/project/openofficeorg.mirror/stable/.../Apache_OpenOffice_incubating_3.4.0_Win_x86_install_en-US.exe

http://i_ine-hn-org_openoffice.fotirretrimo.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.fiblotaredut.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.fhoaicoraresk.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://gsf-cf.softonic.com/455/0b3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70944&instance=softonic_br&type=PROGRAM&Expires=1467861098&Signature=bJowNSVw2LPQVbg2EanuoL7KfphJXmJV2cKZ8~Hl7X1akK9JnI9fZgH8KS2MlTX8zsVkPj0VOMJhWVtRHsew7fNvQwL1jI2vksW7YS7UUdeVoeRLQFYeKYWIm46k5jNWx12Kgq6s42OzHDOmHZVLguxO00DI6uPX9tKn374UBEs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Apache_OpenOffice_incubating_3.4.0_Win_x86_install_en-US.exe

http://i_ine-hn-org_openoffice.figloreglasxu.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://ftp.heanet.ie/mirrors/download.sourceforge.net/pub/sourceforge/o/op/openofficeorg.mirror/stable/.../Apache_OpenOffice_incubating_3.4.0_Win_x86_install_en-US.exe

http://i_ine-hn-org_openoffice.flofcoredis.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.foutrirewio.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://i_ine-hn-org_openoffice.fopjutrirelad.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://open-office.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMLYpOW/bqh55JOFG2I9JJ6mAb7dfXVCoF6TMVXEFbXIX8bCy5hvGrxbd83U8X PY7H48UZWoLQ15TCRjYccia noPFQzotmM/zysTCBi3h5RCZbWMA6ICgraL8g3BJiEMCsLmVqnS/YqVwENA64K1wXIGLsJP2ct61ylbI4mkgX7QUvYzToIcnwPkf0imFUwuF V4YlmHA DUbGt7dnM2FDLzlG/FCyzfqJLRk L6W47Ae110YqknqQyIIKE3QbQd2nLQJOVXQSYdvJsJP61Vf9WO 9euOi2USnqGn4OvRum197kO4BIxNcRp9vxy8o9R5SFlkcX7s1biJe3wKpmX yI0d//1Bl2qGRAV39dIymjarbr8twd gWx8sXiFr1nEB3kiqQrwjmei8WOxI45w5WORaq0kI8D7BH5HUAvJsel9yXs7dKwc6A0uLmvV/.../Cayt9CtPL9GUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c1sYo341XIg2FIQE7vp2ivuW6iaC2MwqFso5t36TLLPfeqKIfutCt5K5aMqMfSzrGEeJ5NQ9wPEhhf4q8bs lafedY6FjbfzQ6MLvGoBtTElNjiTEQjr4jxp62yTy xrhg==

http://i_ine-hn-org_openoffice.fjotraredimwa.com/crawled_soft/2/5/.../25829-662329-openoffice.exe

http://downloads.sourceforge.net/project/openofficeorg.mirror/stable/.../Apache_OpenOffice_incubating_3.4.0_Win_x86_install_en-US.exe

Latest 30 of 45 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.