home

winamp5601_full_emusic-7plus_en-us.exe

Winamp Installer

Nullsoft, Inc.

This is a setup and installation application. The file has been seen being downloaded from www.gameszone.ro.
Publisher:
Nullsoft, Inc.

Product:
Winamp Installer

Version:
5.6.0.3091

MD5:
8c334c3b105d4379aea1ce9c0bbc22a3

SHA-1:
d43587cc0bac863fdf4cd62f88480df6089f5357

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:51:38 AM UTC  (today)

File size:
11.2 MB (11,770,200 bytes)

Product version:
5.60 Build 3091

Copyright:
Copyright © 1997-2010, Nullsoft, Inc.

Trademarks:
Nullsoft and Winamp are trademarks of Nullsoft, Inc.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\My documents\downloads\winamp5601_full_emusic-7plus_en-us.exe

File PE Metadata
Compilation timestamp:
4/10/2010 3:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:RQlaR1ea26WFQJR46nltVgGFBFUp7us5W6L+uVOwWQrT+JO8W4y6Ld:RY6WuM6njVHFDUpKslywXryW4yk

Entry address:
0x354B

Entry point:
60, 03, F3, 0F, BD, D5, 0F, BA, E9, 44, D1, D6, 52, D1, D6, 0F, AF, EF, 0F, BC, DA, 5D, 0F, BD, C3, 0F, C1, F1, F2, 6A, 00, FF, 15, 6C, 81, 40, 00, 2B, D8, 69, FE, 6D, 7C, 4F, D6, D1, E1, 8D, 3D, 9C, EF, F6, E1, E8, 00, 00, 00, 00, 8B, D8, 0F, B3, EA, B9, BC, 8F, 16, 81, 3C, DF, 58, 81, C0, 98, 74, 6E, 00, 0F, C1, CB, 0F, CF, 0F, AF, FE, 81, E8, 1D, 8A, 40, 00, 0F, BC, FE, 89, E9, B9, BF, 86, 31, 30, 50, 81, C0, 87, 02, 00, 00, 0F, BB, D3, 85, D5, EB, 01, AF, 81, C0, 97, 0A, 00, 00, C7, C1, FF, C6, 71, 70...
 
[+]

Entropy:
7.9949  (probably packed)

Code size:
25 KB (25,600 bytes)

Windows Firewall Allowed Program
Name:
C:\Documents and Settings\miri\My Documents\Downloads\winamp5601_full_emusic-7plus_en-us.exe


The file winamp5601_full_emusic-7plus_en-us.exe has been seen being distributed by the following URL.

http://www.gameszone.ro/.../winamp5601_full_emusic-7plus_en-us.exe

Scan winamp5601_full_emusic-7plus_en-us.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.