tinyumbrella-5.10.14.exe

tinyumbrella-5.10.14

This is a setup program which is used to install the application. The file has been seen being downloaded from download943.mediafire.com and multiple other hosts.
Product:
tinyumbrella-5.10.14

Description:
TinyUmbrella - Save your SHSH!

Version:
5.10.14

MD5:
4a4cf8979d5ed3fef772cbaa95ab2ae5

SHA-1:
161ce7886ea4ef381971df2a1c6694ed306caa75

SHA-256:
0f5183737ea305d67e82fbc45b04ae2200b534148050c355f93cc3cf9232fc8f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 10:56:58 AM UTC  (today)

File size:
2.2 MB (2,295,296 bytes)

Product version:
5.10.14

Original file name:
tinyumbrella-5.10.14.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
3/16/2011 6:29:26 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
49152:QRbX1rfBuyXj5MKGqGiNNS3DN+WxQGOfDSXTuF:Upz5fGlEGN+WxMfl

Entry address:
0x11D8

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9352  (probably packed)

Code size:
129 KB (132,096 bytes)

The file tinyumbrella-5.10.14.exe has been discovered within the following program.

Apple Application Support  by Apple Inc.
Apple Application Support is required to run iTunes, QuickTime and other Apple installed products (do not remove this if you use any of these programs). If you remove this program you will need to reinstall it in order for iTunes to load.
www.apple.com
6% remove it
 
Powered by Should I Remove It?

The file tinyumbrella-5.10.14.exe has been seen being distributed by the following 17 URLs.

http://download943.mediafire.com/15a82ik50l6g/.../tinyumbrella-5.10.14.exe

http://download2156.mediafire.com/dbw0uzf452ig/.../tinyumbrella-5.10.14.exe

http://s6556.chomikuj.pl/File.aspx?e=jaaDELv6kPkmTsoXfrswAFzALfvKkIvzIN3nMemPSppkY2NwuJyhymFiMWYrinnVIXHzMeH0a-UooggmwWybfweBSshbwca01yKTKWDrOQ9K_D4-O_FZTL0AfiCiN1dgMdwJbjEQmOkyoUi2U47dMQ&pv=2

http://205.196.121.192/dde3u96uoaeg/.../tinyumbrella-5.10.14.exe

http://download1756.mediafire.com/2qtbmj406z7g/.../tinyumbrella-5.10.14.exe

http://download1756.mediafire.com/aqgzzdmd96hg/.../tinyumbrella-5.10.14.exe

http://205.196.121.223/vc39x5d44zpg/.../tinyumbrella-5.10.14.exe

http://download1756.mediafire.com/50naw21lw3mg/.../tinyumbrella-5.10.14.exe

http://download1756.mediafire.com/11vg15rf31pg/.../tinyumbrella-5.10.14.exe

http://download1756.mediafire.com/aqgbx3a7uhtg/.../tinyumbrella-5.10.14.exe

http://download997.mediafire.com/14716m7f8exg/.../tinyumbrella-5.10.14.exe

http://199.91.153.125/ub1ldccyi7dg/.../tinyumbrella-5.10.14.exe

http://download1279.mediafire.com/3mzdu5py4cog/.../tinyumbrella-5.10.14.exe

http://download965.mediafire.com/ou8vloh231yg/.../tinyumbrella-5.10.14.exe

Scan tinyumbrella-5.10.14.exe - Powered by Reason Core Security