apache_openoffice_4.0.1_win_x86_install_es.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from downloads.sourceforge.net and multiple other hosts.
MD5:
1299943d87a9e749f1cb28c9186ac4de

SHA-1:
478f8c1ccd1b3b9f8064572a3a7ffffa19827d85

SHA-256:
5136276a370378d11327b9a0bd074d269a49e797c7186f2e3cc9cf6c0bbc20fc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
10/31/2024 10:50:27 PM UTC  (today)

File size:
126.3 MB (132,478,227 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\apache_openoffice_4.0.1_win_x86_install_es.exe

File PE Metadata
Compilation timestamp:
2/24/2012 8:20:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:R1lFQsunuPbQux+50IWMWW53MDqHcDyAlEWmEhUF6sI5tEysfWvfzhOHAKc:R1lqsunuPbzwWFW53MDqxb3EOA5tEysY

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file apache_openoffice_4.0.1_win_x86_install_es.exe has been discovered within the following program.

360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
 
Powered by Should I Remove It?

The file apache_openoffice_4.0.1_win_x86_install_es.exe has been seen being distributed by the following 50 URLs.

https://downloads.sourceforge.net/project/openofficeorg.mirror/4.0.1/binaries/.../Apache_OpenOffice_4.0.1_Win_x86_install_es.exe

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1421499386&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=BVElzyHjiJCfULv-w323y90~3oItB7cRkrz1IYl3-XthMMte9bYui2G8c9Yfmab6CbwRb-KzOS7980-T5Xlr9HSH0V2fFivHFtIvtNi4GsuOHK93PAQY8ClznMUsvEXnN-4Ir5Pxy6aKOrIvUUvC7zRvDgtsfXePKAL~AzGxjoU_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1424544961&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=WDuyTPm3IG~xKdgC7Zo3YHpSmP3qr74D8Q~eRftsDPapPxhxQTSQJO4mP~jciFv-CRJ~BDr3~L0P~m25Hw94p0CL5h8SkpUZSRbvglli10YXuKF7asKVwP-5nc3bc9~ZFV4ll8h5qcli5e~PBmV9o9ERf~eh5CuxurQRktWbQo4_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1424079346&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FuVmR9Tw4fD-HBn77Z0IlL3gMhlrFp51FtPXDwdcsvJNVJQGLihOuCfj-s-x9~7N3kATDOnVCDXBu3DZgqK~Xw4WOJs~72At0r4OKlRIX2ERCB6GVjPeS0JrMabjX9RGUL9pnp3oZwf-UJS7FduJ7bHsuRI1WcZq077JbUeBfIE_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

http://dw.uptodown.com/dwn/Ncg3NkC3FzePo8P5hi2VwQPhaEkL7lOMx5KuJF-t68czY1O9pHjvSnr4HRgaiMxp1LUClOC7KIrYrLArx2CoN__rtH4WeALrKp4VuLFwtkI5sGKPIw_1jiL2nOn4PieS/BlOtSyDvu-VBFUChumtIxHZviDRF8NyXwUgcppeDrJyYneX7-4h4XUYm4tP8uwGH2_rwo5142nYCEpZPF111PAv4Ja8juKNSOvLFg8mbkksqLdir86eDysfSDYA849RP/.../

https://netix.dl.sourceforge.net/project/openofficeorg.mirror/4.0.1/binaries/.../Apache_OpenOffice_4.0.1_Win_x86_install_es.exe

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1421634916&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=cPtC7QPivFxzMjhJerZcl0RBE01a9A6imACk~wXcsDF7r4Z7bugrM3bz0I7YBJWDFjEK42DJagB2mfCayHwiIsMgiC9Ta6sAx3cVUcyjxRnR2i9MJQonuMdQyWhvnMvOI3ZaU4tJrOKFxE-WAQaQB55NxegHkS~iOb9iXLpS5L4_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1424506093&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=LVbDKnHl2c18QqfeEhbFpXu-IpH3LP5jT2GUudyd4myB0l47YwLG0cqbFRg3X7WUcLZ8suSMgG-989ENYZln6ySKsdIYrk2z76Bxmzr~5YGOhWlvKFzp4j0XbxrCh2Eq2rOc8gcRJjA0vXuq1Rql4mpDAcZzZOH9fSHcKjJGxCU_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1424643983&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=bCwjiZuW53Z8nd2Gevs2PSGhv6cNeySNNjl7HBog6OsxB03nY8DZ8ZeCWnREZFDHMiXIWxMCgePzSPHFkLQnKcoI7DjR6VVU6XcGf9mzOMEvAsoPx6bUY3YCfJQ6jcW77MCG2-zhnzoc24OOX9jX0SGXgpps6rhRq-xXBX0XjeA_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1426095762&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=O0iiVcrWfmBBpSKeXBuNoh35bzLUWM3hFsXh7YCQ0vpQUiLu2D3u8ulq3j5YeRyMQ0BjCVSGzCvfJhAlQYD3PE27MjclWd6Wm~5iqFRsyks8ND~Md06R4qBnLiljAFBvm15U6nGV56MbahILtBOhZRCvxSTf2bkHnCICrhq90kw_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

https://doc-0g-1g-docs.googleusercontent.com/docs/securesc/89to6s1isledvn7f11vv998ba46li8kg/oq447v7sea0b77egguevmh48ukctkop2/1452189600000/02203418050034754353/.../0ByIGQujEmovzcDB1NVFMR0dERG8?e=download

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1422745622&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fMt-gKQ49CE2MvOqnJ8TXDk0hOMHQ1Gbrn-9ec9Q~PfH88-XLat3ZCrkl2KrADvhTqbffXBWqPWHf9bRn27Dgdomky-FSbvNOFri-duHVJDiNQXpzTvDl0ecAp5Ezx41QmnjD7xK8i1ykn2NFda0SDIZSBirdLj-Dd1Z1YTCdRc_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1425083474&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=d8t0f7qYRefbqoS1xej~UsI82O5~I13n6nXWdbVA6SfJe4SrOISu7QQR0cQaooxESEHHc4VcSdbAgJ-NrrbppkFS1XAdjp-O1uFnE9bF-pJPdB1AJrFxKUi7fN0Al~GoGxrawIKstKixSf5DzG0N6ZzCYzYudZyj2DLDN6SB-VY_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

http://gsf-cf.softonic.com/478/f8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21277&instance=softonic_es&type=PROGRAM&Expires=1424730820&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fCoNDinmTSDbO0S4bBeQKeA3yfSxRqzPBDduBlkFrx3VmnN5il0cgmCO-nAFAcpA2jGqVs8vYZIME6i0Ydxo07eL0~5YNdiiyx9hQUXwdkLDnvFjTJCdlfYck4gUTKKT1Imm59HFU0xnUTfGuKAgZrL5~TMmSAX~4mdH05jqd1U_&filename=Apache_OpenOffice_4-0-1_Win_x86_install_es.exe

Latest 30 of 54 download URLs

Scan apache_openoffice_4.0.1_win_x86_install_es.exe - Powered by Reason Core Security