home

winamp561-full-emusic-7plus-en-us.exe

Winamp Installer

Nullsoft, Inc.

This is a setup and installation application. The file has been seen being downloaded from www.go4it.ro.
Publisher:
Nullsoft, Inc.

Product:
Winamp Installer

Version:
5.6.1.3133

MD5:
f569455aef0a7e23d4585e7a58e5f144

SHA-1:
92ce1c62325dc2aa31a0879217c313188addcce6

SHA-256:
124575aca6ac8ec187d663ca23326b722f53ecf314fd86b4e7fcc0b82823eb66

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 3:21:29 PM UTC  (today)

File size:
11.5 MB (12,058,256 bytes)

Product version:
5.61 Build 3133

Copyright:
Copyright © 1997-2011, Nullsoft, Inc.

Trademarks:
Nullsoft and Winamp are trademarks of Nullsoft, Inc.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\winamp561-full-emusic-7plus-en-us.exe

File PE Metadata
Compilation timestamp:
4/10/2010 3:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:XR58S+d4WiIsZD8TpiP4inYtQleVJTvUql78xgZ1NEERO33OHgSFbxPsU+NSWIpL:XD3+deTZDKpiP4iYt+eVJ7UK8xwEERRX

Entry address:
0x354B

Entry point:
60, 33, F5, 80, EB, 19, 84, F7, 10, DF, 8A, D7, 68, 61, 53, 38, 00, 87, F3, 89, F0, 80, E8, CA, 45, 0F, BE, F6, 81, FF, 9F, B6, 00, 00, 70, 06, F2, 0F, AF, F3, 13, D1, E8, 77, 00, 00, 00, 81, FB, 48, 6E, 00, 00, 77, 03, 0F, B7, F8, F2, 25, 54, A1, 62, E1, 48, 2B, F2, 8A, F7, 2B, D2, 84, CD, 74, 09, 8D, 3D, E5, 9D, 47, 18, B7, FC, 4E, F2, 88, CB, FF, CD, B3, 01, 87, DE, 8D, 0D, 4E, 04, F2, FF, 69, DE, 22, 14, 16, 0A, F3, 85, C0, 4B, 87, D8, 4B, 03, D1, 88, F4, 38, E4, 81, C2, B3, FB, 0D, 00, EB, 07, F6, C2...
 
[+]

Entropy:
7.9944  (probably packed)

Code size:
25 KB (25,600 bytes)

The file winamp561-full-emusic-7plus-en-us.exe has been seen being distributed by the following URL.

http://www.go4it.ro/.../8082791

Scan winamp561-full-emusic-7plus-en-us.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.