home

openal-2.0.7.0.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
47f53b4b655a9f8124687141b0f94d92

SHA-1:
45e08368c6755c58902b7746ff3e51ad2df8a8b8

SHA-256:
d165bcb7628fd950d14847585468cc11943b2a1da92a59a839d397c68f9d4b06

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/23/2024 1:45:25 AM UTC  (today)

File size:
576.6 KB (590,434 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\openal-2.0.7.0.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:F5dCT73wdMvAnwcXpj9338SChgvPfG1jiqNB12p3Ev9l3H:F5rOvkwcXb8SChg3fY+2B1Hv33

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 27, 5B, C3, 3A, C3, EB, 4B, 15, EA, 01, 09, 00, 18, 5A, 0C, 00, 0B, 00, 00, 00, 6F, 61, 6C, 69, 6E, 73, 74, 2E, 65, 78, 65, EC, 5A, 7D, 74, 14, 55, 96, AF, 4A, 3A, 93, 12, 3B, 74, 23, DD, D2, 6A, 7B, 6C, B5, 66, 26, 4A, 60, 02, 04, 8D, 9A, 68, BE, 0D, 10, A4, BA, 3B, E9, A0, 40, 80, 25, C1, 4A, 8B, 01, 42, 37, E0, 0C, 3A, 61, 3A, BD, 52, 29, FA, 1C, CE, 19, 9D, DD, D9, 75, 76, 64, D0, 19, FE, 60, 3D, 9C, 1D, 8E, 44, 97, D1, 4E, 40, 1A, 1C, DC, 41, 94, 8F, 11, D7, 0D...
 
[+]

Entropy:
7.9979  (probably packed)

The file openal-2.0.7.0.exe has been seen being distributed by the following 6 URLs.

http://gsf-cf.softonic.com/45e/083/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94201&instance=softonic_en&type=PROGRAM&Expires=1480306929&Signature=PIpu7TrRizjiKV5PlYjcRN4xM2-yk1Hye8HVXY~bZHgTWCAz1EAaM9dKoxXMQ1pI3AFxv93xYuXgm9Dr1fFms0bFwJ7lLfg8XrXJESQ8JvcX7WDF6X6jusuK-FlBwOhOUTilphBh-kTVpvdxGxON8a5ePDHbIKX1I6Uq2qM68dM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=oalinst.zip

http://gsf-cf.softonic.com/45e/083/.../file?SD_used=0&channel=WEB&fdh=no&id_file=94201&instance=softonic_br&type=PROGRAM&Expires=1466071243&Signature=GCbsAG7vz86uUoVN3B11n3O0RlZYBXWRwfwSsESDL0gL5r1SkpRDIgDGi5nmltOPT5xpMhf7Br74u8LnhLKWSfgaxxpFcPuZwkNC81RgkcWTIdHq39kHKa4qegz8n~AZL6oeud5IyPWQQkAWvvzE9wi-O1-At0gMA~CSA5p5y~8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=oalinst.zip

https://www.openal.org/.../oalinst.zip

https://e0455c21-a-62cb3a1a-s-sites.googlegroups.com/site/.../openAL Installer.zip?attachauth=ANoY7cozZEnU1ei2TfcQpPE6hSQBkmjOYthSUTCFaAJO6ShJCQg7TAA7qThSNTipEIhurUz7FEINRn1uQF5ix9uM3tIT6VClxmz-XjdAKSxdehxA5NFOg8b-TlbSmXOZvgV7IYDTBrLdCdADRJi0M1_lhgbL2UNVtlDcxv4n1RXJLX7gq5ydYPQroQkL61qpa8qysWUptm4OAci6n1u-YhgQHH1tDCyXYw==&attredirects=0&d=1

http://www.openal.org/.../oalinst.zip

http://www.openal.org/.../oalinst.zip

Scan openal-2.0.7.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.