home

winamp5666_full_en-us_redux.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from winampplugins.co.uk.
MD5:
1cd75073010e3abd78facdee61bf9483

SHA-1:
3f63f59979d9b1d0c63ad604d84dbf7c0807d7cb

SHA-256:
19adf0a7e9109f3a239041760b2da097f6235fb9a74dd2362f70f419a717e4a3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 11:30:29 AM UTC  (today)

File size:
9.9 MB (10,394,134 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\winamp5666_full_en-us_redux.exe

File PE Metadata
Compilation timestamp:
2/25/2012 12:49:59 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:+HwXkU2EgG6irWd/hgu/iCgKpp4iXBfqS/yS7AAxOf5vDmGsUcD:+fgnk/f/zp4il1//1xI5bmccD

Entry address:
0x39E3

Entry point:
89, DD, 81, CA, 73, 68, 3E, 63, 0F, BF, F3, 24, 61, F7, C6, 09, D3, 5F, 9D, 81, FF, 17, EA, 00, 00, 71, 02, FF, CE, 8D, 05, 38, FE, A2, 8E, 0F, BF, D9, 28, CC, 29, CF, 68, E2, 0C, 00, 00, 0F, C9, 5D, 4E, 81, F5, 22, 05, 00, 00, 89, C2, 87, DA, 0F, CA, 81, ED, F0, F8, FF, FF, 81, ED, 11, 07, 00, 00, 80, D1, F1, FE, C9, 8A, C8, 81, FD, 2C, 00, 00, 00, 73, DF, 75, 03, 4E, 88, DA, 13, C0, E8, 0E, 00, 00, 00, 69, CA, FE, 57, CC, F8, 87, F5, 81, FB, DA, 1E, 00, 00, 58, 8B, F2, 8D, 15, 38, 2D, 55, 14, FE, CB, 3B...
 
[+]

Entropy:
7.9930  (probably packed)

Code size:
28 KB (28,672 bytes)

The file winamp5666_full_en-us_redux.exe has been seen being distributed by the following URL.

http://winampplugins.co.uk/.../winamp5666_full_en-us_redux.exe

Scan winamp5666_full_en-us_redux.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.