winamp566_full_pt-br.exe

Winamp Installer

Nullsoft Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.towerbitscenter.com and multiple other hosts.
Publisher:
Nullsoft, Inc.  (signed by Nullsoft Inc.)

Product:
Winamp Installer

Version:
5.6.6.3507

MD5:
ae26234fc0023c32a6ff63a0003e1977

SHA-1:
e07d18c917e80b72c2553116998f22def740a250

SHA-256:
c700f375e5e1f75623311b3c397e011954d35e4745cd69cec03da6ebc617d59c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:41:41 PM UTC  (today)

File size:
12.4 MB (12,993,768 bytes)

Product version:
5.66 Build 3507

Copyright:
Copyright © 1997-2013, Nullsoft, Inc.

Trademarks:
Nullsoft and Winamp are trademarks of Nullsoft, Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\winamp566_full_pt-br.exe

Digital Signature
Signed by:

Authority:
America Online Inc.

Valid from:
3/15/2011 3:25:39 PM

Valid to:
3/14/2016 3:25:39 PM

Subject:
CN=Nullsoft Inc., OU=Winamp, O=Nullsoft Inc., C=US

Issuer:
CN=AOL Member CA, O=America Online Inc., L=Dulles, S=Virginia, C=US

Serial number:
5AA8C9C387719F49A16AF24065565550

File PE Metadata
Compilation timestamp:
2/24/2012 4:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:z2Jq1nn9PVavOBzcW/ZOAgWY9EQGpJvZ70UbSly0Kqu:+8n9PIONcW/Z69vyZ75GlA

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file winamp566_full_pt-br.exe has been seen being distributed by the following 25 URLs.

http://www.towerbitscenter.com/ xNLUU6iaCqLcYSuazD1yx_o4kGys7jPmXlvDCAiYFdmHL9KQYDEIoPeIaa9PefUZkL0zpyKWe9qBab8izK kvtcdjNfxi_Bvabit6EAnqgQiKU_Qd8bp Z0t6fvWqt HS5Vw4rN6U48oxuOrYj6R3Ep54OfK4E_vlurtzf3y0jm_8L1LOMqUkA_JN6ylLI7usMrZGZg519fxhlyB39UuW3Yj8OAFX2R43rfaIQUrSBxpZJiksnP7JobMgxztXoL8CDqy3NQsyONrAUq9Ixi 9UllhBo4y5DkqmD9ntYrO8xAr2df8CJOT7PmP6In8EQt5TgkkHdaCgKfqa_iNoHaqUMNd Xh1MpJBe2LFIhX_0gnUMDrbMPV_VwYPxyGd3ct6ctSnNIjFXm 6 cLFxYwKVRHcKKhemludnhmUsDnMlRAXmfQLj8_lxzfq_ gT1LGQj3YB7_faMa7M70j0AA5HaZDT9xstD8lA9PeDYba5l1XtLWzaWWRgRkJfmF86jWEHWUNQ97LPTMiThmgUPB1HePwkiLgOkRJaeKZmpsqzOGB4Or_CmatEyb2NeuRNoeTlIb9wCMxPgd7FTmYsgBaC3DdTeSXWpPnzQO 3QJb1mLwFDUxv3nIR0ksr8WOe zDkPtDsfj-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=-e

http://www.towerbitscenter.com/SeLJIMFy_xApuOE_YbwvxTjY8pp2JioEFDZ2 sTadgaR NqTWaJYUB VzN96NOVs6JHDK0F4u_C9NfU2CeiEvlIW1tV0CAehdo79mksPScC6uqBeUbR56jFi5yzuSDB_VxjR39bj7Bu2Tf36bG_xNp7M2QA4Hk4VlXsLG1d10pj86TIjOwapadaeTVyjCpl0l31G7QOiPP8W5RmmA1OI9 QvxGnwNA==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/3d63VwbDapOSxu1gEuzEkDCXDYBMppI5aPFgmsYvS7E5iCQClWaCW3pw d0wEvasfjxUEKrdTw6NbKNLDYRkutnBwNN4ZYsGyLHlJ8xswAliHpPEM51hrwIO6J9twgVVBJGQL9n5kh8btvwhNsoXiNqBTAC4J4m1bxnKw62GE1Fk1yRgtUUZl 04ZMzFNm6b7Qvuh6mMOFWmkZNiHaflW6Cfo60mEA==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/93FFOwhwf6LgdpqkcXiAoeFcShIcMZ2IPREkkspqUxBHFOS WTuAhLefC7KiHxCUJINQpVhCWGxN4NYPweQQYMwL1vrFGoA2tLWsG2_YpcFAtU1eMBVDmVFj3CqWrkmf2j4cxZKrfb8SXopcl8Jn3D x9 UKhh3H2Fpd2UnhM 6wdapWPoEh3SQ3Zj BJ362VzPl8VaMVE43yMw2Z1PucqGn2XVehA==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/bJ0MNDdgGQPBnwN wL08lEOLvXympoANjJelVmrqmIlzJ_Sg5gKDZ_HfXzHWbVKWP1NPDei LDsAIpnW_2Od Yz2qyxLLwPOyi2lFNSFvYTq3JdaqJyur3m1IKSllC2Tsrlgl0k ToydDXJt4xRsy dcPAyFlxiK8ZxLtSU_p4Up2wJNzL4hYwGGEvwmLGfLuxJULuacl5lxQm50u2 FLMbrVEIbyw==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.towerbitscenter.com/FZ06_Vog185W2Ys JKyR 6wRa2VsMdWt1S4zfJIbsAwFoTQjC8ICAthobV54aEXOXm63AbnOJeWaf1fK9l6rcsD Nl8DiCJIh683xtGAdvurS6f2b2fEn30tHnQ09nuxcK2NkVyRrM sL1rJ0TEsXuIg0JMNBlMYA57z35Y312bYbcwy10IxVrOgtPaN spczDvJ0ylfF FjoeOymtyXtNN2hb433Tl3Sqvuzsyn5YHRLcMIarI=-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.towerbitscenter.com/MjCcCK i8JEj8V3kUyTF6hP0uQl iZPxWyI1tDxmDtT0d4rE1ftINuddArhR76oSGraDtMPmz7M9pIpgcdr_BatXPedXoOmKZUA53dx3Nk7J0sY3EomjTQh5Tc1WjpecSDtkSegycVjFbLNccjFeVcw26AaSDKAOSK3cRIJAxaU8_VFLaWmFPMw38xqyRCChTZ0 Jc7VnUG b9WK 9kQg 5THAIvzQ==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/2eXVnAUkZjGt1iZA6sdjkdjqAXJNuhN1QkWftISmSDTm2DUaw8NHN8KSm7IW43IeyIOwvrnVqwpSZo_ pIM ipqf5feC3FtIRJwCuBHmOmzLgsr9WVCYNXuG_I5sn0fFrqzxSrTLpb08wy7wV5DkPul5Wh379T5Xmk1Gl8viHdqAVNIf_GYVfPHpNZG5fhkMWGeV6kktB3O6VNI9gLcDBhoqGmiwRQ==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/iL8GWiFbgCvOCwOWjhK8i0B5Rz8aXBLkqnzOmPc5WPBAUSn UxV ZaOC4NSX26S_q4r2IDIyc1WPkFzXd4btQFwR1sgdZvHKoM QGat5C3zpLdPZ4_Twtkj3roUJmGXwtWZSc5bZ0BjiHijjftwsn21hDwOYyYmMhR1cwKeKzpLcBS0Z0_TSTtR5iwTSSK19f0HQOz9TPhQFTi_DifnSwidOW4YvtQ==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/_NH1 5kcFwmtJjkWRDDaEerdCVtAJUhuUdBSfV eYoBqkHPldfcD255Pcu2AEH_AYzwksi_Cxsw5 fFWvPlaL6Z69tEemUVn0u5mfbN1dqfQD8ICPrg5MekpVecXRwOz03Yaj1F8qWD5iD2S_MzRoUOP3PzHVM9hU1AfdlFUw0jQcHViri1kx3OSFzFUH1VxcZmckuM0vr_NXPGFDtBJ6RuwlW7gnQ==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/mxIbjn4lnWTB1qL4BRTN2_QTypTdl4xTGOTg3SknkjK1B9DJ M 2GUr5FZhCEJsS7RbnzKI_WLb1jc91ufSGRJGu2CiitoEkk2SUeVA8JDAOxT1UK8S2CjEXLTnf02EPrsoHCZZjqRukyi9PrCk9HeBgCx3b29w5bgjCKDYb3iMxHD1JYWILX1 _x0vVLRvR7ZpOhZfy_GgGrUGBg7IuGn4ObxPWzg==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/Q849o5hJDCEuUo8DHWTyQIpA830q36eG0TUbM_RYHT2GVpSuw4kirvmFc5RglMCZ6D0hZ2jekyb5vPaP3Eger3yDlPJHxnvX_DYFBgu5oC6INR_WgUMegv0hTzyR9QhPUU_LSstGD9KNKQbyiaal8tXt0VgXGbZMhQqm35SX2HoitBcK6k7OWJMwzgi_3qgLTxNyUzJxf2lOFdKxbTfpT397fYoPLw==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/bsucwkvgcQiw6aiDN5 UUyuWMkntIl4ERwvJM1dmRqKfYGPbM6M_f33oazOg2QtV2zixH9Bkz_rA4TQ0oHk_DY52ntyKCnHmBlOntqsqg6biwK QEuXiogCQ2n9zTs4IBnjd4FwJIW9CZFVW1hL_X1H1fipI5Gb5JHsbH54nMgLmPYE1_3vPEjn3hcmeUxvOWtGKKQOEoPSWBBNHjvNSRqtw SKJ3A==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/8F_KjKPDR2fACLl6h4qc_iraVPq0Ms1UAHjeYVPZqpMWxKcup3mWIa9L44ICEcsNl5cJn045rT_zwKIde7QE0NOdbxvqr1wAVVwyB9o8No16SU_P5 CBPUufK6BHlS N31Jf83EYr4ID8mzlU0iC bUVYgzIRIEel4yMv_ERoa4Dm9N3dWRvrZlBB Y9Ekaeg9zliGBF1EMWT 6 0CHdb D4jje16A==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.towerbitscenter.com/zaHQ_4_XFA rouUVHZD2HgZ7HYAr7L7wjdO9dkqqOW lcDjKWMqwk2T52UtVxZAlwmNyYkz8M4PirbeIJyITzayIwmb8rD0oV9_KaFCxGFIF2w8w_hKJU6LTtUvyPKhWMt2tPoRlGvFKD3ncaKyPknUQizKFf8L9VZSftBb8ZueGCjv0 Ikf1qxf3lF2kZkXH9Im2 UOEZ5o9zF2nrgL7D76b51qUw==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/cB5du4oNphtUSVypTMUfPTTSYK3M_deNqm3YghnOJWibj7ELAgNcqvzBxqYYZc60 v7 nCXg2B4uilb0Ljc_dieJWhY2hIHImOa3CvXg7Wl4EKDIw2vk9NeFyFKzDKVYH1QTU1KVrlJfmmK8k79lrOYrFq3RdYZ5KF4o9G 00MkNtQWNX28s065XOlL4H65GaIUWw7guxxXQl dDPVG5uk8UJ3l 6Q==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/UmxbI3K4jBOh48q BiGdmagPtmTduqXVY5_Qj2MODBpYq QSVwe0OFXduxXxAVCLX6UKysEaJ4t3z0ASAbmGYhNLCs WUNtfvqPO3sjZz53dPWKqAK 5CbzGnxfXv9nj9BoFM5UzKPcf1Q9HT6Y7iVpY_PUjni6IuJ_OfMjLJSEE8_Tglc6PfwwZKJIa8uW45Zu86Sq5Pt6lY_eay4FwWyGYlOvo7Q==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/NwmaL_j9lRyrxejVnvqELsyCCHHxi363aH6pUj p1S5a3LMqT_xysks50MCxOHXNn9Ry3d7UFTlhV9CWlvBKu32rGNp2XELIGkPErY9lFRc4Dc4RclKpZIxipKDxbj6adAq39osacz6SOH9Yj0FBTgLy_jjQ9Qm1yuJ0njlu5RQ5Aaz0SiDG1fXwJdJfzWkSAFhS1uSz5IKT bYw_kjAoUFm6sRd_g==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/hdHH24v4 xPDDqqQZYOtHdOd6Ubolrdhzp8X7duoIzOAdLGWeYa159dESSE3KXoAAaFs8fZtpvFJ5KbOcBYBtMKUhy_oZlNEo00vi8WrtTfmvVnJTEVtHs6BnH1RdAZitxSTWGhU2spIx3AyzP1puQ8fyNzvKb6eHBeY9xI1EhlwupB_jU1PViIHkLK4N9ITP1Knlxhw9_Ht0dkpXxQ_b0147Id9Xg==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

https://www.dropbox.com/s/.../winamp566_full_pt-br.exe

http://www.ranchsendgift.com/pcAV5vEGuH1MwxpILW3XOYdV3xWbQPuHoPOLLOJWGQGSG29tAy 50wU8wGAv5RjEvhyldlA4mZD9kNcuwayREQaK71Bih9Z132AgacCMMLgI1Et7LIjxsf90_0frWvoytTaZw0SKhsy28ugu1mtE ifc9tH0UzUzXxGCpOOWXplpUUYVsP2GbW0VhgVCJe5gVXIX0AqmVFbublHlEc6h_K3jyCu6FA==-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=

http://www.ranchsendgift.com/jS Pk Nz6JdyYGjGb_C QrwVGGUHy6iDr3Mus 9s3jvZZIjJBiR4udX8SrUbtOAgM6UiBbu1iHyvrC89sWJ4tFCKvi4szEt64SRATcBmvHTMqduEOZ1_nEjjf79CWYTuuxoftWkRLt6hsfw6tPQUwOGsbaItod UTpN6wtS7TgdvmVT7sz20CuCj3GAnJf vKQp_LYUNgyhnCDrZpkQ_cnoptg1o4XI2soJl EhO1zkIDu Jz224K8NzGbEzsuFjeB4ULjB9q8Oj_31tLDh8KB8dlJtdfIN5tVYgbDbU9VROMpmG0EPkfVpU42JSefrcOKbeiNcVpHlnnBa_OL6jCFrysANVEelVtytEMMWTkNVeJiTbF2ywllfbMnnFbCANXfMJSeZ4OkvJAY 03om sYg7gF0e0oPrEp18Ii8gIX5W3bqhqFk58uzs2RJFDGe_EGruu7Pbx4gJVNtmtAbqmzLU697ov4SDJqslY_M4ksN 9CRy2Tj7YiCBCrKsDz0qChBjajiuW1wdCFy8nyoVjTDRQVVKkzBmWhlj0VvgscF ucHskCZRKHyVGCmAubejqcOWhc h-G1QAAORtmytb a5UCAmZYkI55YC9VpJYwAHQ7zE2pksij9b4V4mwgD2X3YzO1IGnB_pFm_vkdPVqV2hDJMGDPMsI4M8=-e

Scan winamp566_full_pt-br.exe - Powered by Reason Core Security