home

redsn0w.exe

Apple Inc.

This is installed with multiple programs including Apple Application Support (32-bit) and Apple Application Support. The file has been seen being downloaded from download2223.mediafire.com.
Publisher:
Apple Inc.  (signed and verified)

MD5:
cfc19371ed05b6d38ec45a737618da3c

SHA-1:
8f9f7db415fd6ea0b8ed7fdce18069ffb7f5ca3e

SHA-256:
064367859a46043cc921cf56c17370fe8f576b9ab6f79a0f3db6edbbd4311f10

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:04:55 AM UTC  (today)

File size:
131.2 MB (137,580,544 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Apple Inc.

Authority:
Apple Inc.

Valid from:
4/25/2006 5:40:36 PM

Valid to:
2/9/2035 4:40:36 PM

Subject:
CN=Apple Root CA, OU=Apple Certification Authority, O=Apple Inc., C=US

Issuer:
CN=Apple Root CA, OU=Apple Certification Authority, O=Apple Inc., C=US

Serial number:
02

File PE Metadata
Compilation timestamp:
11/1/2012 8:31:10 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
393216:kS9Z2NmH2ldJWbhumrkfVoTNtVZ8XHpOV0Kxm+J6aUoNP7KHJ:rMgYJWdujWTNtL4wHmoLUopKHJ

Entry address:
0x1240

Entry point:
55, 89, E5, 83, EC, 14, 6A, 02, FF, 15, 48, 61, 76, 08, E8, BD, FE, FF, FF, 8D, B6, 00, 00, 00, 00, 8D, BC, 27, 00, 00, 00, 00, 55, 8B, 0D, F0, 61, 76, 08, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, A8, 61, 76, 08, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, 89, E5, 83, EC, 08, A1, 40, 7A, 6B, 08, 85, C0, 74, 3B, 83, EC, 0C, 68, 00, 80, 6B, 08, E8, CC, 93, 27, 00, 89, C2, 83, C4, 0C, B8, 00, 00, 00, 00, 85, D2, 74, 0F, 50, 50, 68, 0D, 80, 6B, 08, 52, E8, C1, 93, 27, 00, 5A, 59, 85, C0, 74, 0D, 83, EC, 0C...
 
[+]

Entropy:
5.1538

Packer / compiler:
Dev-C++ v5

Code size:
3.4 MB (3,536,896 bytes)

The file redsn0w.exe has been discovered within the following programs.

Apple Application Support  by Apple Inc.
Apple Application Support is required to run iTunes, QuickTime and other Apple installed products (do not remove this if you use any of these programs). If you remove this program you will need to reinstall it in order for iTunes to load.
www.apple.com
6% remove it
Apple Application Support (32 bits)  by Apple Inc.
www.apple.com/fr
9% remove it
Apple Application Support (32-bit)  by Apple Inc.
8% remove it
Apple Mobile Device Support  by Apple Inc.
Apple Mobile Device Support is required and used for the synchronisation between an Apple mobile iOS devices (iPod, iPhone or iPad) and a PC through iTunes.
8% remove it
Apple Software Update  by Apple Inc.
With a Windows PC, you can use Apple Software Update for Windows to keep your Apple software up-to-date via the Internet. Apple software includes Safari, iTunes for Windows, Bonjour for Windows, and QuickTime for Windows.
www.apple.com/softwareupdate
21% remove it
Compatibilidad con Aplicaciones de Apple  by Apple Inc.
Publisher's description - “Unlike traditional screen reader, VoiceOver is built into the operating system, so you can use new applications directly accessible. No need to buy an upgrade for VoiceOver, install a fresh copy and add the application to a "white list".”
www.apple.com/es
12% remove it
 
Powered by Should I Remove It?

The file redsn0w.exe has been seen being distributed by the following URL.

http://download2223.mediafire.com/6w9qn9920lyg/.../Redsn0w.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.