soffice.exe

  • File Path: C:\program files\LibreOffice\program\soffice.exe
  • Description: LibreOffice

Hashes

Type Hash
MD5 F1ACF6DB37A26E2EA498DBDCFDCF8F73
SHA1 B29C63506F415BED7F45DD4EA9231145B45AB7BA
SHA256 EEA66A150C97229B2C0491006A07A592B4E80C1F3473F698E0529BF9005B5159
SHA384 338A14689419CD87C5FB4B9D054FDEE5EA43199AC11324AAE86894CBCB0ECD580C62EC4C52C4EEAC41AF706663570F54
SHA512 96F05FBFEA830F6927F4CD440A9E6285250177F5D48F815234BD379E925BD6B0E2A42ACE3FB3E284195AB3DD11CCDAD67AC231C74EF1EFB073FD1F9C062AEB56
SSDEEP 3072:gcGmpcSSwi3ofraMcSC/K92O7Rvv4ELb6suv:gcGmpcSSwMofuQP7RYZf

Runtime Data

Usage (stderr):

Warning: -help is deprecated.  Use --help instead.

Child Processes:

soffice.bin

Open Handles:

Path Type
(RW-) C:\Users\user\Documents File
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\program files\LibreOffice\program\soffice.exe
C:\Windows\System32\combase.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\IMM32.DLL
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\SYSTEM32\MSVCP140.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\shcore.dll
C:\Windows\System32\SHELL32.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\SYSTEM32\VCRUNTIME140.dll
C:\Windows\SYSTEM32\VCRUNTIME140_1.dll
C:\Windows\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 049F5EBAA6B29CF6C79003917374242E
  • Thumbprint: 059BD34C72E8BE4FB19A80877268097C87F7D487
  • Issuer: CN=Certum Code Signing CA SHA2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
  • Subject: E=info@documentfoundation.org, C=DE, S=Berlin, L=Berlin, OU=LibreOffice Build Team, O=The Document Foundation, CN=The Document Foundation

File Metadata

  • Original Filename: soffice.exe
  • Product Name: LibreOffice
  • Company Name: The Document Foundation
  • File Version: 7.0.0.3
  • Product Version: 7.0.0.3
  • Language: English (United States)
  • Legal Copyright: Copyright 2000-2020 by LibreOffice contributors. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\program files\LibreOffice\program\unopkg.exe 83

Possible Misuse

The following table contains possible examples of soffice.exe being misused. While soffice.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_susp_non_exe_image.yml Image\|endswith: '\program\soffice.bin' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.