home

apache_openoffice_incubating_3.4.1_win_x86_install_fi.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from downloads.sourceforge.net and multiple other hosts.
MD5:
43a0b3c162583b078ca13dbf642af0d7

SHA-1:
cdacd04a6ea375770e5ec30bd0c7451ea1e397a4

SHA-256:
1e66c04050ef9955d765d5bde085f20b63844b1c85b1c5cd6126b5f92ae7b416

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:41:40 AM UTC  (today)

File size:
125 MB (131,081,964 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\apache_openoffice_incubating_3.4.1_win_x86_install_fi.exe

File PE Metadata
Compilation timestamp:
12/6/2009 12:50:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:zGg4n9oohon4iOwPy6/cmMrFkhac4WlDIDzpPjPU7rnGJ7i1KbsAK8:b49O4XR6/SYF46DIDzpLPU7jQeQYs

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file apache_openoffice_incubating_3.4.1_win_x86_install_fi.exe has been discovered within the following program.

360Amigo System Speedup Free  by 360Amigo
360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
 
Powered by Should I Remove It?

The file apache_openoffice_incubating_3.4.1_win_x86_install_fi.exe has been seen being distributed by the following 9 URLs.

https://downloads.sourceforge.net/project/openofficeorg.mirror/localized/fi/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fi.exe

http://ignum.dl.sourceforge.net/project/openofficeorg.mirror/localized/fi/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fi.exe

http://freefr.dl.sourceforge.net/project/openofficeorg.mirror/localized/fi/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fi.exe

http://switch.dl.sourceforge.net/project/openofficeorg.mirror/localized/fi/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fi.exe

http://voxel.dl.sourceforge.net/project/openofficeorg.mirror/localized/fi/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fi.exe

http://netcologne.dl.sourceforge.net/project/openofficeorg.mirror/localized/fi/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fi.exe

http://cdn.mirror.garr.it/sf/project/openofficeorg.mirror/localized/fi/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fi.exe

http://garr.dl.sourceforge.net/project/openofficeorg.mirror/localized/fi/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fi.exe

http://downloads.sourceforge.net/project/openofficeorg.mirror/localized/fi/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fi.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.