home

tinydm.exe

Tiny download manager

http://www.tinydm.com/

The application tinydm.exe has been detected as a potentially unwanted program by 26 anti-malware scanners. The file has been seen being downloaded from dl.tinydm.com.
Publisher:
http://www.tinydm.com/

Product:
Tiny download manager

Version:
2.3.0.0

MD5:
93ef078630b07bfe6db1efb9955e1ff3

SHA-1:
ab91c9c9ee2e17eeb76ceb84477b7206431840b3

SHA-256:
883c0e001dca748c41a01004ed7314cf96efecd22c815b149443b1d7183a0c04

Scanner detections:
26 / 68

Status:
Potentially unwanted

Analysis date:
1/13/2025 8:25:02 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.13143410
644

Agnitum Outpost
Trojan.Badur
7.1.1

AhnLab V3 Security
PUP/Win32.Downloader
2015.04.23

Avira AntiVirus
TR/Badur.otnbf
3.6.1.96

avast!
Win32:Dropper-gen [Drp]
2014.9-150426

Baidu Antivirus
Trojan.Win32.Badur
4.0.3.15426

Bitdefender
Trojan.Generic.13199733
1.0.20.605

Clam AntiVirus
Win.Trojan.Badur-69
0.98/21511

Dr.Web
Trojan.DownLoader12.57503
9.0.1.0116

Emsisoft Anti-Malware
Trojan.Generic.13143410
8.15.05.01.05

F-Secure
Trojan.Generic.13143410
11.2015-01-05_6

G Data
Trojan.Generic.13199733
15.5.25

herdProtect (fuzzy)
variant of d5701abec84b6f5de16e9eb509c0989e
2015.7.27.13

IKARUS anti.virus
Trojan.Win32.Badur
t3scan.1.8.9.0

K7 AntiVirus
Riskware
13.203.15677

Kaspersky
Trojan.Win32.Badur
14.0.0.2131

McAfee
Trojan.Artemis!D5701ABEC84B
5600.6691

MicroWorld eScan
Trojan.Generic.13143410
16.0.0.363

NANO AntiVirus
Trojan.Win32.Badur.dqgpka
0.30.20.1219

nProtect
Trojan/W32.Badur.1007104
15.05.11.01

Panda Antivirus
Trj/Genetic.gen
15.04.26.09

Qihoo 360 Security
Win32/Trojan.53d
1.0.0.1015

Quick Heal
Trojan.Badur.r5
7.15.14.00

Reason Heuristics
Threat.Win.Reputation.IMP
15.5.1.13

VIPRE Antivirus
Threat.4150696
39676

Zillya! Antivirus
Trojan.Badur.Win32.28647
2.0.0.2174

File size:
983.5 KB (1,007,104 bytes)

Product version:
2.3

Copyright:
(c) 2013 All rights reserved

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\tinydm.exe

File PE Metadata
Compilation timestamp:
4/6/2015 5:38:05 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:1JeD+RTxoy/1FQBf654wBPeGf2L5WMJt/GCJ6f3s+mW:2DcYBS54qxM5WMJgM6/s+mW

Entry address:
0x832D8

Entry point:
E8, F2, DF, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 53, 56, 8B, 75, 08, 8B, 46, 0C, 8B, C8, 80, E1, 03, 33, DB, 80, F9, 02, 75, 40, A9, 08, 01, 00, 00, 74, 39, 8B, 46, 08, 57, 8B, 3E, 2B, F8, 85, FF, 7E, 2C, 57, 50, 56, E8, 3F, D3, 00, 00, 59, 50, E8, 7B, E7, 00, 00, 83, C4, 0C, 3B, C7, 75, 0F, 8B, 46, 0C, 84, C0, 79, 0F, 83, E0, FD, 89, 46, 0C, EB, 07, 83, 4E, 0C, 20, 83, CB, FF, 5F, 8B, 46, 08, 83, 66, 04, 00, 89, 06, 5E, 8B, C3, 5B, 5D, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 85, F6, 75, 09, 56...
 
[+]

Entropy:
6.3881

Code size:
651 KB (666,624 bytes)

The file tinydm.exe has been seen being distributed by the following URL.

http://dl.tinydm.com/download/.../TinyDM.exe

Remove tinydm.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.