home

openwith.0_95.exe

OpenWith Enhanced

Greg Frieger

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with OpenWith (Enhanced). The file has been seen being downloaded from extensions.frieger.com.
Publisher:
Greg Frieger

Product:
OpenWith Enhanced

Description:
OpenWith Enhanced installer

Version:
0.95

MD5:
da3da3dd37a5b59daec9c83e8269f3e9

SHA-1:
0cfc65cee734182bc3719d2619978bd39f8a06cf

SHA-256:
b7a5313ee86df5800b0a9a0fdf5b266b45edb9c16218bd23c1f418f2aca01eed

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:53:37 PM UTC  (today)

File size:
409 KB (418,793 bytes)

Product version:
0.95

Copyright:
© Greg Frieger

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\openwith.0_95.exe

File PE Metadata
Compilation timestamp:
12/5/2009 4:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:/sTgKcB6Fcbi6MSjGxPTy7yGrQRoksi4a5qJO0FWpkB7KoqQ:AkvWrSS4hooULqJ0hor

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.8980

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file openwith.0_95.exe has been discovered within the following program.

OpenWith (Enhanced)  by Greg Frieger
Publisher's description - “Need to test your web pages out in Internet Explorer, Chrome, Safari, Opera (or anything else for that matter)? Open With adds options to various parts of your browser for opening the current page in another browser.”
extensions.frieger.com/owdesc.php
22% remove it
 
Powered by Should I Remove It?

The file openwith.0_95.exe has been seen being distributed by the following URL.

http://extensions.frieger.com/.../OpenWith.0_95.exe

Scan openwith.0_95.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.