Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

5.7.0.3444 0.34%
5.7.0.3437 1.35%
5.7.0.3417 0.34%
5.7.0.3392 1.35%
5,7,0,3323 0.34%
5.6.6.3516 1.69%
5.6.6.3512 1.01%
5.6.6.3510 0.34%
5.6.5.3438 6.42%
5.6.4.3418 0.34%
5.6.4.3418 1.01%
5.6.4.3415 2.70%
5,6,3,3235 40.54%
5,6,3,3234 5.07%
5,6,2,3199 14.19%
5,6,2,3189 4.73%
5,6,2,3188 1.01%
5,6,2,3173 5.07%
5,6,2,3161 0.68%
5,6,1,3133 3.72%
5,6,1,3133 2.03%
5,6,0,3091 0.34%
5,6,0,3080 0.68%
5,5,8,2985 3.04%
5,5,7,2943 0.34%
View more

Relationships

Parent processes
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegQueryValueExA, RegOpenKeyA, RegQueryValueExW, RegOpenKeyExW, RegSetValueExW, RegDeleteKeyW, RegEnumKeyW, RegOpenKeyW, RegCreateKeyW, RegDeleteValueW, RegCreateKeyExW, CryptAcquireContextA, CryptReleaseContext, CryptGenRandom, RegCloseKey
gdi32.dll
MoveToEx, SetBkColor, GetTextExtentPoint32W, GetTextMetricsW, ExtTextOutW, SetTextAlign, GetTextMetricsA, ExtTextOutA, CombineRgn, OffsetRgn, CreateRectRgn, GetTextExtentPoint32A, CreateFontIndirectA, CreatePolyPolygonRgn, CreatePen, Rectangle, LineTo, CreateFontA, CreateSolidBrush, FillRgn, GetStockObject, CreateRectRgnIndirect, GetObjectA, StretchBlt, GetPixel, SetPixel, CreateBrushIndirect, SetDIBits, GetNearestColor, SetStretchBltMode, RestoreDC, RectVisible, SetTextColor, SetBkMode, UpdateColors, SelectPalette, RealizePalette, BitBlt, GetDeviceCaps, CreateCompatibleDC, SelectObject, GetDIBits, GetDIBColorTable, DeleteDC, DeleteObject, CreatePalette, CreateCompatibleBitmap, GetCurrentObject, SetBrushOrgEx, CreatePatternBrush, GetObjectW, CreateFontIndirectW, GetFontLanguageInfo, IntersectClipRect, ExtSelectClipRgn, EnumFontsA, CreateFontW, SaveDC, CreateDIBSection
kernel32.dll
DllMain
msvcr90.dll
DllMain
nsutil.dll
nsutil_fft_Forward_F32R_IP, nsutil_image_Palette_RGB32, nsutil_image_PaletteFlipped_RGB32, nsutil_image_Convert_RGB24_RGB32, nsutil_image_ConvertFlipped_RGB24_RGB32, nsutil_stats_RMS_F32, nsutil_window_Multiply_F32_IP, nsutil_window_FillHann_F32_IP, nsutil_window_Hann_F32_IP, nsutil_pcm_FloatToInt_Interleaved, nsutil_pcm_IntToFloat_Interleaved_Gain, nsutil_image_Convert_YUV420_RGB32, nsutil_image_CopyFlipped_U8, nsutil_image_Copy_U8, nsutil_fft_Create_F32R
ole32.dll
CoUninitialize, RevokeDragDrop, CoRevokeClassObject, OleUninitialize, OleInitialize, RegisterDragDrop, CoRegisterClassObject, CoCreateInstance, StringFromGUID2, CoGetObject, CoInitialize, CoTaskMemFree, CoCreateGuid, CoTaskMemAlloc, OleRun, CoInitializeEx
rpcrt4.dll
UuidFromStringW, RpcStringFreeW, UuidToStringW, UuidCreate
shell32.dll
SHGetPathFromIDListW, DragQueryPoint, Shell_NotifyIconW, SHGetSpecialFolderPathW, SHBrowseForFolderW, DragQueryFileW, DragFinish, SHAppBarMessage, SHFileOperationW, SHChangeNotify, ShellExecuteW, SHGetDesktopFolder, SHGetFolderPathW, SHBrowseForFolderA, SHGetSpecialFolderPathA, SHGetPathFromIDListA
shlwapi.dll
PathRemoveFileSpecW, UrlIsW, UrlGetPartW, PathFindFileNameA, PathIsRootW, PathRemoveFileSpecA, PathAppendA, PathIsNetworkPathW, StrCmpIW, StrCmpNW, PathFindExtensionW, StrCmpNIW, PathStripPathW, PathCanonicalizeW, StrToIntExW, PathCommonPrefixW, PathAddBackslashW, PathIsUNCW, PathIsSameRootW, PathCombineA, StrToIntW, PathQuoteSpacesA, StrChrW, PathQuoteSpacesW, PathCombineW, PathFileExistsW, PathIsFileSpecW, PathIsRelativeW, PathStripToRootW, PathRemoveBlanksW, PathRemoveBackslashW, PathIsDirectoryW, PathFindFileNameW, PathIsURLW, PathRemoveExtensionW, PathAddExtensionW, PathAppendW, PathUnquoteSpacesW, PathFileExistsA, StrToIntA, PathIsFileSpecA, PathIsRelativeA, PathRemoveBlanksA, PathRemoveBackslashA, PathIsURLA, PathCreateFromUrlA
tataki.dll
Quit, Init
user32.dll
DllMain
Export table
plstring_malloc
plstring_release
plstring_retain
plstring_wcsdup

Winamp.exe

Winamp by Nullsoft Inc. (Signed)

Remove Winamp.exe
Version:   5,6,3,3235
MD5:   2e87cb333884e9aed6f4c3b057a3650f
SHA1:   bb79da2684f3564cffb2d4be15ab540a6ccdb5db
SHA256:   e1c25f6d056f022f641656f1bc5b92a6f82fd90b3ab244e980b5591cf81b75ff

What is Winamp.exe?

Winamp is a media player for Windows-based PCs and Android devices, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-format, extensible with plug-ins and skins, and is noted for its graphical sound visualization, playlist, and media library features.

About Winamp.exe (from Nullsoft Inc.)

“The Ultimate Media Player for Android just went Pro! The Pro Bundle offers enriched audio, premium features & customization, and is available as an upgradable in-app purchase.”

Overview

winamp.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It configures an autoplay handler withing explorer.exe named WinampPlayMediaOnArrival that will launch the program automatically. It is installed with a couple of know programs including Winamp published by Nullsoft, Inc, Winamp Essentials Pack from Christoph Grether and Winamp Essentials Pack by Christoph Grether.

DetailsDetails

File name:winamp.exe
Publisher:Nullsoft, Inc.
Product name:Winamp
Typical file path:C:\Program Files\winamp\winamp.exe
File version:5,6,3,3235
Product version:5.6.3.3235
Size:2.1 MB (2,206,888 bytes)
Certificate
Issued to:Nullsoft Inc.
Authority (CA):America Online Inc.
Expiration date:Sunday, December 19, 2010
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Winamp Essentials Pack
 Christoph Grether
7% remove
Nullsoft Tray Control Icon Pack
 Christoph Grether
9% remove
Winamp Offizielle Deutsche Sprachdatei Plus
 Christoph Grether
2% remove
Win7 Taskbar
 Magyari Attila
1% remove
RemoteControl for Winamp
 Martin Schlodinski
9% remove
InFlac
 Michael Facquet
3% remove
“This plug-in allows to play native FLAC files with Winamp. It stands for Free Lossless Audio Codec. It is similar to MP3, but lossless, meaning that audio is compressed in FLAC without any loss in quality: you get a perfect copy of your CD tracks, but with files significantly smaller than WAVs.”
Winamp
 Nullsoft, Inc
9% remove
Winamp is a media player for Windows-based PCs and Android devices, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-format, extensible with plug-ins and skins, and is noted for its graphical sound visualization, playlist, and media library features. Winamp supports music playback using MP3, MIDI, MOD, MPEG-1 audio layers 1 and 2, AAC, M4A, FLAC, WAV and WMA. Winamp was one of the first common mu...
Winamp AudioPlayer
 Nullsoft, Inc
12% remove
“Winamp is a free multimedia player made by Nullsoft. It supports numerous audio and video formats. It also plays streamed video and audio content, both live and recorded, authored worldwide. It has an extremely customizable media library, and allows you to rip and burn your favorite music CDs. Winamp has thousands of skins and plug-ins that allow you to change the look-and-feel of the player, as well as add new features. The player also...”
Winamp Detector Plug-in
 Nullsoft, Inc
5% remove
Winamp Application Detect is a browser plugin for Internet Explorer and/or Firefox that allows Winamp.com and other participating sites to detect a Winamp installation and version when delivering content. It does not collect or send other information. Winamp is a free media player that can process several media file-types. It is a protocol winamp:// that allows partner sites (such as WinAmp, SHOut… etc.) to detect current music automat...
Chipamp
 OverClocked ReMix
1% remove
Cosmic Rhapsody Icon Pack
 Paweł Porwisz
7% remove
Winamp Icon Pack
 Paweł Porwisz
1% remove
foobar2000
 Peter Pawlowski
9% remove
“foobar2000 is an advanced freeware audio player for the Windows platform. Supported audio formats: MP3, MP4, AAC, CD Audio, WMA, Vorbis, Opus, FLAC, WavPack, WAV, AIFF, Musepack, Speex, AU, SND... and more with additional components. Open component architecture allowing third-party developers to extend functionality of the player. Support for ripping Audio CDs as well as transcoding all supported audio formats using the Converter compon...”
DFX 8 for Winamp
 Power Technology
9% remove
DFX
 Power Technology
24% remove
“DFX Audio Enhancer brings better sound to all of your music, videos, Internet radio, games, video chats, and other programs. New DFX 11 now enhances all PC audio playback, providing system-wide HD quality sound for all your entertainment. DFX now enhances all PC audio playback, providing system-wide HD quality sound for all your entertainment.”
ClassicPro©
 Skin Consortium
9% remove
Image'in Winamp by WinampFR
 WinampFR
7% remove

BehaviorsBehaviors

Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
  • Handler name 'WinampPlayMediaOnArrival'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\Winamp\winamp.exe'
  • Firewall exception for 'C:\Program Files\Winamp\winamp.exe'
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'tr_winamp' → C:\Program Files\Winamp\winamp.exe
Scheduled tasks
  • Entry path '\{FE293530-8B27-4CFD-A0D5-0D7444C5129B}'
  • Entry path '\{C687A602-7EED-4AB1-BF31-9451F5071DB0}'
  • Entry path '\{BEAD62EE-0D2B-457C-974C-A76E92290227}'
  • Entry path '\{8E1E7219-7C36-4249-9BCB-4223CBDEF3AE}'
  • Entry path '\{6D792975-5D05-4117-BBEA-BE824DD893E3}'
  • Entry path '\{5CEC8391-FEA9-4FB0-8A84-9F8C4C9C0FF8}'
  • Entry path '\{54705C6E-DF7E-4B5E-91EE-71449313112D}'
  • Entry path '\{359F4512-13C1-44BD-B6E6-1AFAAF600628}'
  • Entry path '\{1CB1812A-91D2-41F9-B714-554105118F9A}'
  • Entry path '\{11E90AEC-52B0-43B4-8497-EEDC8568584B}'
  • Entry path '\{0BAB2831-0CD7-4435-B255-E3667EBAE4EF}'
  • Entry path '\{010BFDEB-8FF2-41A9-B857-E30F8C685E0D}'
Network connections
Access through an approved Windows firewall exception
  • [TCP] 173.192.48.71-static.reverse.softlayer.com (173.192.48.71:8050)
  • [TCP] 80.86.106.35:8088
  • [UDP] listens on port 1900
  • [UDP] listens on port 54889
  • [UDP] listens on port 61232

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.04916697%
    0.028634%
    Kernel CPU:0.03033598%
    0.013761%
    User CPU:0.01883099%
    0.014873%
    Kernel CPU time:16,928,126 ms/min
    100,923,805ms/min
    CPU cycles:5,765,061/sec
    17,470,203/sec
    Context switches:700/sec
    284/sec
    Memory
    Private memory:48.1 MB
    21.59 MB
    Private (maximum):66.73 MB
    Private (minimum):43.1 MB
    Non-paged memory:48.1 MB
    21.59 MB
    Virtual memory:229.6 MB
    140.96 MB
    Virtual memory (peak):254.44 MB
    169.69 MB
    Working set:49.67 MB
    18.61 MB
    Working set (peak):77.55 MB
    37.95 MB
    Page faults:111,941/min
    2,039/min
    I/O
    I/O read transfer:1.09 MB/sec
    1.02 MB/min
    I/O read operations:240/sec
    343/min
    I/O write transfer:151.13 KB/sec
    274.99 KB/min
    I/O write operations:20/sec
    227/min
    I/O other transfer:79.35 KB/sec
    448.09 KB/min
    I/O other operations:6,190/sec
    1,671/min
    Resource allocations
    Threads:31
    12
    Handles:506
    600
    GUI GDI count:887
    103
    GUI GDI peak:922
    142
    GUI USER count:316
    49
    GUI USER peak:336
    71

    BehaviorsProcess properties

    Integrety level:Medium
    Platform:32-bit
    Command lines:
    • "C:\Program Files\winamp\winamp.exe"
    • "C:\Program Files\winamp\winamp.exe" -embedding
    Owner:User
    Parent processes:

    ResourcesThreads

    Averages
     
    wow64.dll (Win32 Emulation on NT64 by Microsoft)
    Total CPU:0.44223359%
    0.272967%
    Kernel CPU:0.01244895%
    0.107585%
    User CPU:0.42978465%
    0.165382%
    CPU cycles:13,865,229/sec
    5,741,424/sec
    Context switches:30/sec
    79/sec
    Memory:252 KB
    1.16 MB
    in_mp3.dll
    Total CPU:0.14335817%
    Kernel CPU:0.01535980%
    User CPU:0.12799836%
    Context switches:100/sec
    Memory:364 KB
    MSWMDM.dll
    Total CPU:0.04975248%
    Kernel CPU:0.03482674%
    User CPU:0.01492574%
    Context switches:5/sec
    Memory:328 KB
    winamp.exe (main module)
    Total CPU:0.04717014%
    Kernel CPU:0.02558610%
    User CPU:0.02158404%
    CPU cycles:9,476,656/sec
    Context switches:30/sec
    Memory:2.2 MB
    ole32.dll
    Total CPU:0.01249188%
    Kernel CPU:0.00749513%
    User CPU:0.00499675%
    Memory:1.24 MB
    dsound.dll
    Total CPU:0.00256443%
    Kernel CPU:0.00000000%
    User CPU:0.00256443%
    Memory:368 KB
    in_wm.dll
    Total CPU:0.00256338%
    Kernel CPU:0.00256338%
    User CPU:0.00000000%
    Context switches:99/sec
    Memory:344 KB
    pmp_wifi.dll
    Total CPU:0.00248793%
    Kernel CPU:0.00000000%
    User CPU:0.00248793%
    Context switches:17/sec
    Memory:128 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Ultimate 35.00%
    Windows 7 Home Premium 23.00%
    Microsoft Windows XP 15.50%
    Windows 7 Professional 7.50%
    Windows 8 Pro 4.50%
    Windows 8.1 2.00%
    Windows Vista Home Premium 2.00%
    Windows 7 Ultimate N 2.00%
    Windows 8 1.50%
    Windows 8.1 Pro 1.00%
    Windows 8 Enterprise 1.00%
    Windows 7 Enterprise 1.00%
    Windows 8 Single Language 1.00%
    Windows Vista Home Basic 1.00%
    Windows 8 Enterprise N 0.50%
    Windows Developer Preview 0.50%
    Windows 8 Enterprise Evaluation 0.50%
    Windows 7 Starter 0.50%

    Distribution by countryDistribution by country

    United States installs about 27.04% of Winamp.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    ASUS 21.78%
    Hewlett-Packard 15.84%
    Dell 15.84%
    Toshiba 10.89%
    Acer 9.41%
    Lenovo 5.94%
    Sony 4.95%
    American Megatrends 4.46%
    Samsung 3.47%
    Compaq 2.97%
    GIGABYTE 2.48%
    Intel 0.99%
    MSI 0.99%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE