home

winamp295.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from software.oldversion.com.
MD5:
123f0d66a7868c507bd16aec3927c767

SHA-1:
868412077a626387299a32b24a8cca3a535cf923

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/18/2024 8:11:12 PM UTC  (today)

File size:
2.4 MB (2,552,512 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\winamp295.exe

File PE Metadata
Compilation timestamp:
3/16/2003 7:41:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:vzcO19djKdy5E/hVtfp0JqIfKJ2kIo/t/zIWy2aGJ7ndnaD4f23D:vzc0dZE/P70JryJLZ7IEaGFdaM+z

Entry address:
0x4046

Entry point:
60, 3B, D8, 77, 08, 0F, AF, C1, 1B, C3, 0F, B7, EA, EB, 0C, F3, F7, C2, D2, F8, 21, 64, 05, E5, 0C, 8C, EF, B1, B8, 0F, BE, DD, 43, 80, E9, 53, 0F, B6, F9, 25, 4C, 6A, 9C, 5F, 68, 9A, A5, B8, 00, 50, 40, C6, C3, 89, E8, 41, 00, 00, 00, B6, FB, FF, CB, 88, FB, F2, 8B, D8, 80, F6, 59, 89, F9, F6, C7, 94, 8D, 0D, B2, A9, AA, 11, C7, C1, 18, 65, 95, 3E, 8D, 35, AE, 7F, 00, 00, EB, 0B, 38, FA, F7, C1, 02, 31, 1D, CD, F6, C7, 70, 81, F6, C9, 03, 00, 00, 39, CD, 2B, C6, FF, CA, 2D, E6, 2A, 00, 00, F3, 81, FE, 1B...
 
[+]

Entropy:
7.9980  (probably packed)

Code size:
23.5 KB (24,064 bytes)

The file winamp295.exe has been seen being distributed by the following URL.

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3MDQ5NDk4MTtzOjI6ImlkIjtpOjQ0NDQ7czo0OiJmaWxlIjtzOjEzOiJ3aW5hbXAyOTUuZXhlIjtzOjM6InVybCI7czo0NDoiaHR0cDovL2FyLm9sZHZlcnNpb24uY29tL3dpbmRvd3Mvd2luYW1wLTItOTUiO3M6NDoicGFzcyI7czozMjoiZmE0Y2I4ZWZjZTM2NGVmYjVkNWQ4ODk1NjZkYzNkMzAiO30=

Scan winamp295.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.