» shareitlenovosupport.exe
Overview
Analysis
File Details
Programs (1)
Downloads (66)

shareitlenovosupport.exe

SHAREit

LENOVO

This is a self-extracting archive and installer. The file has been seen being downloaded from srwtck.com and multiple other hosts.

File name:

shareitlenovosupport.exe

Publisher:

Lenovo (signed by LENOVO)

Product:

SHAREit

Description:

SHAREit Setup

Version:

3.5.0.1144

MD5:

4e36d6ccb52678cde3bda75fe4f5047d

SHA-1:

96502fb9cb088c6d42f7e888aebf9cf2daf3f8af

SHA-256:

da0ef6734663187061b65f24a35a040fc758dd4e7c8056d1837d72f8f20a7fb9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 1:49:17 AM UTC (today)

File size:

4.9 MB (5,181,640 bytes)

Product version:

3.5.0.1144

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\programs\shareitlenovosupport.exe

Digital Signature

Signed by:

LENOVO

Authority:

Symantec Corporation

Valid from:

6/26/2015 5:00:00 PM

Valid to:

9/25/2016 4:59:59 PM

Subject:

CN=LENOVO, OU=LENOVO SOFTWARE, O=LENOVO, L=Morrisville, S=North Carolina, C=US

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

33E605BDE033C95F69D21384E7BC30AD

File PE Metadata

Compilation timestamp:

1/15/2016 12:22:50 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:RI7X49ex4m9eKFBQR1JD0c4jBTK3MZZKh3zIgiqy7soqh9cKj16:WXdeKHQjJD0cgN/Mx7iNAbPq

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86... 
[+]

Entropy:

7.9228

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file shareitlenovosupport.exe has been discovered within the following program.

Toolwiz Time Freeze 2017 by Toolwiz

www.Toolwiz.com

About 6% of users remove it

The file shareitlenovosupport.exe has been seen being distributed by the following 50 URLs.

http://srwtck.com/get?key=b11e8793cade0a4fedc9f17323b20200&ref=http://shareit.lenovo.com/index.html#DOWNLOAD&uid=81754776&out=http://download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkvantage_en/metroapps/SHAREit/MSI/.../SHAREitLENOVOSUPPORT.exe

http://www.tamindir.com/indir/MjAxNy0wMS0xNyAxNToyODoyMg==/shareit/windows/.../

http://www.tamindir.com/indir/MjAxNi0wOC0wOSAwOTo1NTowNw==/shareit/windows/.../

blob:1EAE45F7-9BDB-4761-96C8-C7C82DF26E14

https://mega.nz/temporary/.../ltZmiACT

http://telecharger.freedownloadmanager.org/Windows-PC/.../GRATUIT-3.5.0.html?ac56a5f

https://download.lenovo.com/pccbbs/thinkvantage_en/metroapps/SHAREit/.../SHAREitLENOVOSUPPORT_3.5.0.1144.exe

http://dl2.android30t.com/apps/.../LenovoShareIt-win(Android30t.Com).exe

http://download.informer.com/.../shareitlenovosupport.exe

http://srwtck.com/get?key=b11e8793cade0a4fedc9f17323b20200&ref=http://shareit.lenovo.com/&uid=77313195&out=http://download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkvantage_en/metroapps/SHAREit/MSI/.../SHAREitLENOVOSUPPORT.exe

http://www.tamindir.com/indir/MjAxNi0xMS0wNCAxOTowNDoxNQ==/shareit/.../0

http://www.tamindir.com/indir/MjAxNi0xMC0wMSAwMjoxMjo1NQ==/shareit/windows/.../

http://www.downloadcrew.com/?act=software.download&id=34470&t=1481371784&c=9fc2a301b91318b1ab79362fe130aee38ff8c68d

http://www.downloadcrew.com/?act=software.download&id=34470&t=1478196428&c=f3ddbbd51ba6fc23a698c89af0e318d860bee6ec

http://www.downloadcrew.com/?act=software.download&id=34470&t=1475778917&c=49b5c9903f3bed338d98b37b08eb06a4ffefb7c4

http://www.quickcenterdl.com/IoRbNmjnVLWxUYgDtOBi9fUOJdXHRvUgH3U2im4Su7tqr4wZ7kZ7Z hz56avybwj2DhXglPJC SL6BOxPwFxE2bPkZbRlNR0i1hTwMhnlfWKZ4TV6_yth32g 2uQwmP6nSA49hvvRo3mK4MjzBLWL1A3ZqZNZRaKCCZPjl9h59hCuVHjSAITnKAMq978IAwauPs2czwJu5pVYAU29njBH6W9b2E06opwls4FosAR6M 2PX0CGTq6OvdcOFFNDMsjJy8IdbbuppAcL8AOmRNt3_l9uvCi1dgbvs0Ee_odEYe26i682NZBFwuX1KOuDyYUThI6kxfg5LyRP549FiJyd92ChBBRnvjHoaqJIJuR3ErNYArloyL6Fm4fVB2_QPQkPDV_r4rBVyU8Y2Vd53yG7_dgz34wd95WuFoD9wX3OdajbgogC8LD_z7a7NVdB9OpBzb7bA0ggH409bTQgOcJKTPJviRz5OS5mwghLDf9kykbLJFavdmkRQAQYKjhEWsf1FJ9CjPDqzNxcmG0QMwBtPVQTdK7UlwVPT_61sZTlwugxUNSZ0ipllVZO7aOMIDr3jqZd wGUX2Ph4lx789lhrMtzm0dLV1lpmXh0FbqVcMxGhR9rUk=-G3UAAORwXWy7kN sA59wyqkGILVFEYQH0NPxHmNjG0oZPGEbS2iiWa7bu1nCgS1ihv1h5lDO2AWbi3V66XpTLbFc4SrnQ_f9gia0am 4IWsicEwEMhN36uVFXzRdWRZ1i QvAQ==

http://download.informer.com/.../shareitlenovosupport.exe

https://eu3.proxysite.com/.../process.php?action=update

http://192.168.43.1:33455/static/storage/emulated/0/.../SHAREitLENOVOSUPPORT.exe

http://srwtck.com/get?key=b11e8793cade0a4fedc9f17323b20200&ref=https://shareitdownloadapp.com/shareit-pc-desktop-laptop/&uid=70734639&out=http://download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkvantage_en/metroapps/SHAREit/MSI/.../SHAREitLENOVOSUPPORT.exe

http://download.lenovo.com/.../1465670354

http://srwtck.com/get?key=b11e8793cade0a4fedc9f17323b20200&ref=https://shareitdownloadapp.com/shareit-pc-desktop-laptop/&uid=87994263&out=http://download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkvantage_en/metroapps/SHAREit/MSI/.../SHAREitLENOVOSUPPORT.exe

http://www.tamindir.com/indir/MjAxNi0xMC0zMCAxNDoxOTowOQ==/shareit/.../0

http://download.fileeagle.com/files/2016/.../SHAREitLENOVOSUPPORT.exe

http://srwtck.com/get?key=b11e8793cade0a4fedc9f17323b20200&ref=https://shareitdownloadapp.com/shareit-pc-desktop-laptop/&uid=88445379&out=http://download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkvantage_en/metroapps/SHAREit/MSI/.../SHAREitLENOVOSUPPORT.exe

http://srwtck.com/get?key=b11e8793cade0a4fedc9f17323b20200&ref=http://shareit.lenovo.com/&uid=87689060&out=http://download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkvantage_en/metroapps/SHAREit/MSI/.../SHAREitLENOVOSUPPORT.exe

http://z.getfile134.com/ex/d?z=1883&name=ShareIt App&file=http://download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkvantage_en/metroapps/SHAREit/MSI/.../SHAREitLENOVOSUPPORT.exe

http://dl1.jetelecharge.com/up/P0EQPa1vvG/.../shareit-8630-jetelecharge.exe

http://srwtck.com/get?key=b11e8793cade0a4fedc9f17323b20200&ref=https://shareitdownloadapp.com/shareit-pc-desktop-laptop/&uid=76886734&out=http://download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkvantage_en/metroapps/SHAREit/MSI/.../SHAREitLENOVOSUPPORT.exe

http://www.downloadcrew.com/?act=software.download&id=34470&t=1481111644&c=912c25d5aae920b4aaa91980fa6841071e454740

Latest 30 of 66 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.