home

redsn0w.exe

MD5:
ae69a7379fd8c9b82c3271a67291443f

SHA-1:
e47294bcb109b0bc89f726bbed47b3572c1a1fce

SHA-256:
48eabc0c14eb0e4418988e45729eee1b3028cd304a0cc3e02f843fb9ba9eddfa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:56:43 AM UTC  (today)

File size:
14.6 MB (15,277,568 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
1/5/2011 10:30:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
393216:94AUB7ks1fmtz167WH+4E3ayYZnCgyev:9b7tzV43a3H9v

Entry address:
0x1240

Entry point:
55, 89, E5, 83, EC, 14, 6A, 02, FF, 15, CC, D0, 2A, 01, E8, BD, FE, FF, FF, 8D, B6, 00, 00, 00, 00, 8D, BC, 27, 00, 00, 00, 00, 55, 8B, 0D, 6C, D1, 2A, 01, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, 2C, D1, 2A, 01, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, 89, E5, 83, EC, 08, A1, 08, BC, 23, 01, 85, C0, 74, 3B, 83, EC, 0C, 68, 00, C0, 23, 01, E8, CC, 69, 1B, 00, 89, C2, 83, C4, 0C, B8, 00, 00, 00, 00, 85, D2, 74, 0F, 50, 50, 68, 0D, C0, 23, 01, 52, E8, C1, 69, 1B, 00, 5A, 59, 85, C0, 74, 0D, 83, EC, 0C...
 
[+]

Entropy:
7.4893

Packer / compiler:
Dev-C++ v5

Code size:
2.3 MB (2,405,376 bytes)

The file redsn0w.exe has been seen being distributed by the following 8 URLs.

http://download1428.mediafire.com/2na98je283fg/.../redsn0w.exe

http://download1389.mediafire.com/2es8f32526zg/.../redsn0w.exe

http://download1391.mediafire.com/qth14h7a3pgg/.../redsn0w.exe

http://download1998.mediafire.com/mxb4xedhq4vg/.../redsn0w.exe

http://download1428.mediafire.com/lobdlyf59pmg/.../redsn0w.exe

http://download1391.mediafire.com/r933czq88upg/.../redsn0w.exe

http://download1428.mediafire.com/92kb4c0hshrg/.../redsn0w.exe

http://www.mediafire.com/?1iecc1tsllhsinc

Scan redsn0w.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.