home

spotiamb_0.2.1_setup.exe

Spotify AB

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Spotify AB  (signed and verified)

MD5:
ff8c3ec4ddd3eda0d32b4a95cc2a9342

SHA-1:
3a5b9de500ef1d1e338a2253902d2467b08a7151

SHA-256:
cc5096fe749dabf24b3f9e9970299af2532d3dd8b430f952b8cc43faabf22435

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:26:31 AM UTC  (today)

File size:
543.3 KB (556,312 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\spotiamb_0.2.1_setup.exe

Digital Signature
Signed by:
Spotify AB

Authority:
COMODO CA Limited

Valid from:
9/26/2012 8:00:00 PM

Valid to:
9/27/2015 7:59:59 PM

Subject:
CN=Spotify AB, OU=IT, O=Spotify AB, STREET=Birger Jalsgatan 61, L=Stockholm, S=Stockholm, PostalCode=SE113 56, C=SE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D346B753DC51B7C9A690B3D2EE769139

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:08L3gF2UE++WVnNdY1pWIbyBPcjMQjtT+5CmmsiRVyn1rC:0l2UE++YN61l5hCsmmsiOC

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9738

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file spotiamb_0.2.1_setup.exe has been seen being distributed by the following 5 URLs.

http://dw.uptodown.com/dwn/_pGjN76LETf5A9wstuUEx8dBLn6eE0UhlE-6nrYZcc_sgaO0mFwfI7peqNdK5kAMVOuyqjkBi6UCNhcq35Hw6iFVt2ZRB60OETYztweF0-ugZAA9uryaWoIgPvBSZMsc/VPynp2gkC0F2z72nn5Mb5czIYuAOKKTcqFHysljuXj9vOrRU02NukLsv3vHfJX3lSAcmsimXuJRMfP_HVKBHpWgK7EhlDhbpsmH2BBoJgN8GzwLf521Nag0w4maMchcw/oKNyHLnuJmp6I22RGHOdOBwip-154AKDxAcZCBwSFBW0duAFAiOKRpcC5NGQIC8ZsIIHhvUBAnW7l-6k4giFZowbqvwQOBQL5MEPsHAdHT-dqxa4OT3s6F0MRIVR0fih/.../

https://dw.uptodown.com/dwn/szGc9tpaJZRvyhondprH9EqOwPOOXDGukwz8jytFCLV_PB3EGeowzg6BOr32RusSnAMkrP6pupCX9TKsD5TNqxi6c2_lT9rhe-M3vpAMxJlmTTtPfplZh0jh3yeeQrp2/Y9m-e6ehTCYu4dX83t_S6_NWlMROR8eqar57VNKkvj8GZYJh37-bicXRueuNF7uEkWXbUhLCADYdIn54c95ctGQFzX-mK8SYPKfptQUAuv02r3K-bD9s1e9mdQQAE5Vw/slBOC14lMDJhjnoHMxlYcNRVVVcjFuLuJEBqdwID3dLYiIUffGCwY0ln6EOoIGh2ftrCSdntKAPe_q3fn_rZL5wEjJIIJtfrpbRDXejQdFQDuX-XoU0qDIrAy1rn-lH6/.../

https://dw.uptodown.com/dwn/EIaeaPD7Ypq8gEx6M-BUo6ZeLd3HJ0Cw3EEQs4HFgzP3wTMGWQ8Rsvwxk6AqHo-ECpn7mhgPKCFMfTp3ox9zRPvohqtKmTfhHMsX4_igU0qQJ93DntVplGKP12nN99Gw/suHSeFKq-GGleD7KcV55Qk0Qp5dSXRGgeNQH5HLwY9bGRWsavrUkYlALGT3CBXZHxz6klZxDSS7bot18yyi-umX_7gECyBp8hQwg1UL2tI4SJp0VMHm20efImimxOqAA/5BpBBgNDm9NBQADX4sHUfScSwz78YOeK2VwTCGpPZR2M9GqiumFeSFNBZr6NnztDxAUUnBRXX-1nHsr78Rno8_wixQ4JLoE9Z0JTqp_tJlIwpT5jydeWiFf4Kr5sxzMA/.../

http://spotiamp.com/Spotiamb_0.2.1_Setup.exe

http://dw.uptodown.com/dwn/YeviG5p5xZuoOOln-2Y6wc1fLZ2bccB9v6qlyhmrTIZI2ou6Ey4vI4TH7oDbsOHj_-zl4XuchS_ZonbkRrXUON4qXMZKGZ6gQJPiSOj_sHZiohhJw1_9XT2DWPoQn1LK/H0u71jy32g8crD3uwDyPY0nSUF-lMePVkDlA3uzyX9TGazy07eT6sNaz2ueNKL9E-tYjo0LDzpr6JhhlBvmZGK61xRjCBpsZDqu6MAIW5_ST8H9aFqZkdjYEQtgjMeo3/mLkAOnfGF97sqf5yHB3Spc5VR6I9N-S-MC4zPt97PbUYOGMBEYh-Ryy-CT48R0BaUnP2jv6T84sB4hPm38QEltx8MWEELFJp229JIkgK_z5mf3PCRjk_0nSN6zKPHrnb/.../

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.