frostwire-6.2.0.windows.coc.premium.exe

FrostWire 6

Frostwire, LLC

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.featured-download.com and multiple other hosts.
Publisher:
FrostWire LLC  (signed by Frostwire, LLC)

Product:
FrostWire 6

Description:
FrostWire - Search, Download, Play, Share.

Version:
6.2.0.173

MD5:
4478029341cd17738770817b117fe3cb

SHA-1:
f85c6ba123e7521f7959e51032a72ae9e9617b9d

SHA-256:
a263afe2d2de9a9d433665752532d7d508b1193630e94a23c4eaff661a0e1d02

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:14:39 AM UTC  (today)

File size:
22 MB (23,024,992 bytes)

Product version:
6.2.0.173

Copyright:
FrostWire LLC 2008

Original file name:
frostwire-6.2.0.windows.coc.premium.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\frostwire-6.2.0.windows.coc.premium.exe

Digital Signature
Signed by:

Authority:
thawte, Inc.

Valid from:
4/15/2015 8:00:00 PM

Valid to:
3/23/2016 7:59:59 PM

Subject:
CN="Frostwire, LLC", O="Frostwire, LLC", L=Miami Beach, S=Florida, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
1D7A4AAFCC0AB1DA66F415A36B7AE75A

File PE Metadata
Compilation timestamp:
7/8/2012 7:50:55 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:KheGKi2dr/SYTkBD4o1PzKdirog/gZ6cfRgSRjgv3+ulgm/NiDPTgRdCS1Q/:KheG8Da4YedirN/mPRr+z2mQDPTgTCI+

Entry address:
0x3A02

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, F0, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 38, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 34, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 1C, 93, 40, 00, 68, C0, AD, 46, 00, E8, 1A, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 08, 27, 00, 00...
 
[+]

Entropy:
7.9925

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file frostwire-6.2.0.windows.coc.premium.exe has been seen being distributed by the following 50 URLs.

http://www.featured-download.com/.../download

http://www.superiorpostsdelivery.com/hZs0R4uNhgBiC0NZBFWRQu4UvEUt4cfsD70hICbkEjQ8754E2CuxhpXvpH_F624H1yuJ5YRaxTeFJlGJpLG9_IZ QpKJ5dqklD EmSJBUqIskjF7u2ftnJCfU3IYnuaeYpFrxUUCOixCm95W_iZW8l87EnCMz_4wJjt56uWBQ_tKIW0B0GpVIKC_TxBrWRsZFRNHrrF0fGbVh nGFS1sGeNAdhBP w==-G0AAAEQ3F5NTkQVj0Hr4Hg4OOWBv6yCJRQFw4DFsz0Up I0ximUaFF9ezS7fe_S6vUYQAbSbCvMH

http://filehippo.com/download/file/.../

https://tmpfile11554.s3.amazonaws.com/download77/ic_trackings/1482/.../frostwire.exe

http://dw.uptodown.com/dwn/efW1ykjzN5L2WcKQFt1sQGzHFIvOK7Z4khtyTinam_Be-H1Vw8aFX9Ksj55hZ7-j3tS8zkifhCZM7pyIHxOf38gq90Y3w_9L4sn2EQcpmE2uDb8DlAxlMB16TdgHqcs7/lHPGmqfGPVM8FEwnfys6NmZ6KZ1U5wm3ydwaHJpl-XgEkh2ycVTWW-jw7eWWX2LjOQ5LGe5OumqGrbOZWQIIoB3JKXNCKRtPaiBR1pTFFwIIaZCxCKtaRHfJelnQC9Um/.../

https://tmpfile10666.s3.amazonaws.com/download77/ic_trackings/14446/.../frostwire.exe

http://www.bitstagcontent.com/wAcwrYsCP2RTCPweVlPEntO4sIXhJQ3HTTY2i4e HgbzGhw4yVKhnbcX4d8jZZPl71pMPkomL0P1zPxJIjZOCX8CmBGFdQblRILbujonNTW_jJj0NjWj5V0mVTWDtXxrzEh6plpO1PjumQ26MNQAjCnbgGVRs3YyRgBYkGtX7SRgvpz9zuKqwW1dXQ9ArlwHUZiU0HSq-G0AAAEQ3F5NTkQVj0Hr4Hg4OOWBv6yCJRQFw4DFsz0Up I0ximUaFF9ezS7fe_S6vUYQAbSbCvMH

https://tmpfile10860.s3.amazonaws.com/download77/ic_trackings/13449/.../frostwire.exe

http://dw.uptodown.com/dwn/gcM9AItsT9y_2bpT7lFuBIM5IxNbXArRz9Zky6tO4b5rgJXSosbwtRN2ll5UkrscGqN47-2epEixFuq1oLcyHndYLJMVOYXZLPStvSOO5r-cPbw8UGhAtXWi-5iT7BWO/n96mp4hJkVtw4fERU3rDLSkhngEXqu3RVTdcc7XSct-fPEn6Jd8TpokfNFV_46ltXvTsAeDQYKHJSoYHF0IAyuoaLxwBSuYOWK6XDwK29xmzdgN-GrvQL-3OGWWvmhSz/.../

https://tmpfile11081.s3.amazonaws.com/download77/ic_trackings/6212/.../frostwire.exe

https://tmpfile5002.s3.amazonaws.com/download77/ic_trackings/67057/.../frostwire.exe

https://tmpfile10533.s3.amazonaws.com/download77/ic_trackings/14627/.../frostwire.exe

http://www.bitstagcontent.com/S6eD2a8N1pZMpXV155SOga hLh6O NuG6vL8t7OiMSnuFWRIx5OAjQR65ZC306xPys83zl0NCddtmhs8kGAoGkrZYI7SFBYLVSV2qdbT_WZ6mH JDBYoMQqfyh00JkP31t_qogVc7U2Tk4awvyV YAcYklQwYf72tHsn0XW4vgtbyq3bvyq4IYG277ksWe0GB_CpYNC7-G0AAAEQ3F5NTkQVj0Hr4Hg4OOWBv6yCJRQFw4DFsz0Up I0ximUaFF9ezS7fe_S6vUYQAbSbCvMH

http://www.filepuma.com/file/1452268853c10541/frostwire_6.2.0/0/.../

https://tmpfile10533.s3.amazonaws.com/download77/ic_trackings/21231/.../frostwire.exe

https://tmpfile10533.s3.amazonaws.com/download77/ic_trackings/2814/.../frostwire.exe

http://www.filehorse.com/download/file/.../

http://dw.uptodown.com/dwn/xORl-zRMbBiou6bhSv4n2gU9_8NBE63oxeuYYEuatoFF1XfM6FTvevDL9vikuHIf60EVTRmVc1d8PLqPQtcuO-Xker1c1paRG1qQ-FDjn9K-VJpLl7dVIK6dZWw1x3oP/D9ZZnZ6J46dkjN0OT_GJuPDIshtBCAyPvnPJdZr1bhs5v0udzWQMterpfH3bJGlCsWpDwQRT_DEhZfTPNVKoQ3CAMGkz--kLlgJo8_UiZsuQRYnVtilELjFHI7LN2vz5/.../

http://www.bitstagcontent.com/WC9lb979pG_ RnwdAaf_OAUbn_2eoF_PhZdnnLhA2tlQqmfj MIk_ZBRG_BKpeEFSywlxG8oDd7ekaK8XafVaDqlddxKokkj_zPpgb17LKgzsrAtPftO4k15wjwh2fDmedbfuqoheP jGp93GTkEM2cuYUuVGV2uW_2dnjT9JIl69aAMEwEtAgA1G7QgaufwLBWT4WY5-G0AAAEQ3F5NTkQVj0Hr4Hg4OOWBv6yCJRQFw4DFsz0Up I0ximUaFF9ezS7fe_S6vUYQAbSbCvMH

https://tmpfile6562.s3.amazonaws.com/download77/ic_trackings/42540/.../frostwire.exe

http://www.bitstagcontent.com/scMkab89JOItyfqw5voi1MxDodFXAqmgKMkpBI3X2JC p bdY5n4glmrwmU4JhWmQQkDqDUt54rMCojEP4rw1RlSU8SyTzF7ahPn9I2Q2taldEpxMp aPR4E9XFnfcwnUMJUxmkt8pRINFtrW9qEUxmJN9EXYzBIOMJqFeF09Xi1_S_dW_aAAcXwvti29Ia e_tDQs_I-G0AAAEQ3F5NTkQVj0Hr4Hg4OOWBv6yCJRQFw4DFsz0Up I0ximUaFF9ezS7fe_S6vUYQAbSbCvMH

http://www.bitstagcontent.com/Aer5_d8VKcS7UrxA25 t7ZFNRroyLXNDSFW2tTkcfz8a6421mUW0gyfrrtOjiK5BgnyQhD9vZLj1BHvP_azBTGkRKSx I_igtFqV2y9k6yOH17A_Yaky_8Sv jmBkQggIF_tK1pDkjsaTVtgmva7vsw5m31VnJyOZ6MfGpEPul3UPzPbJWertj41jGbMaNjIC_HO1UbI-G0AAAEQ3F5NTkQVj0Hr4Hg4OOWBv6yCJRQFw4DFsz0Up I0ximUaFF9ezS7fe_S6vUYQAbSbCvMH

http://dw11.uptodown.com/dwn/QeU58lYuz7RYOTgo8g651Uua5opZf5iQTlZ_DggjqP49b4LKebgnbt8GiPLwkavysN7LR1uOzWszXAlE76mdHLPBVB2bngP6kFliK2rluUcPK9keOnQ2JtnZvrcgW4aF/S_zdajituWNp7IEgkKagZjmSaRxwDTJjrJaUldXXtj1MVWc9LRR1EVQb21UOQqGkmwG_TNUHgjPYtqFZ3U6g8L_PHQ-3m0ZvGcSyjLyvPLN6ZHErfNiJH1uHMY2ODKY3/.../frostwire-6-2-0.exe

http://download-1.com/softwares/.../frostwire-5.5.0.windows.exe

http://dw.uptodown.com/dwn/GAEYZqUzCn6tCyANItjnKq5pX5vF8ogmx7ioXg_O2lLKoQG-bM-ymgnVgAWzSI-cOpF8YXLLIbSNWehB4_xgxTQcMmCnUVIcHWib_atZMducR6XpryYnhpIK7MHS7mw0/T31GpC5WpEqEotbyESafcQgzG3LmaJpfXzuAyN_3wF__-laws5L5Qwp_i0ofaIv88JbsmYivAApTW9HSTHGCfHW9YPv5-K7_lReA92gcqiTT8wZp-gB9UNgazXW0XRgt/.../

Latest 30 of 60 download URLs

Scan frostwire-6.2.0.windows.coc.premium.exe - Powered by Reason Core Security