home

0xc0000142-repairkit.exe

PCRepairKit

Auslogics Labs Pty Ltd

This is a self-extracting archive and installer. The file has been seen being downloaded from dynamicdownloads.tweakbit.com and multiple other hosts.
Publisher:
TweakBit  (signed by Auslogics Labs Pty Ltd)

Product:
PCRepairKit

Description:
PCRepairKit Setup

Version:
1.7.1.3

MD5:
098204404f9a2320c376ca62ebcb65bc

SHA-1:
9811136cd7dcf318e111219e4ec38ab974d78730

SHA-256:
5525161b2b4bbfd90e00edb9c792c7f5943008a93722ed603829698f13115f29

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 9:27:29 AM UTC  (today)

File size:
400.7 KB (410,344 bytes)

Product version:
1.x

Copyright:
Copyright © 2008-2016 Auslogics Labs Pty Ltd

Trademarks:
Copyright © 2008-2016 Auslogics Labs Pty Ltd

Original file name:
pcrepairkit_stub_installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\0xc0000142-repairkit.exe

Digital Signature
Signed by:
Auslogics Labs Pty Ltd

Authority:
COMODO CA Limited

Valid from:
5/15/2014 2:00:00 AM

Valid to:
5/15/2017 1:59:59 AM

Subject:
CN=Auslogics Labs Pty Ltd, O=Auslogics Labs Pty Ltd, STREET=L 7 222 CLARENCE ST, L=Sydney, S=NSW, PostalCode=2000, C=AU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
3D697A20890658526AB2F4CE3926AB80

File PE Metadata
Compilation timestamp:
7/15/2016 2:25:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:qtTtdM5wNktUjSxbGZ09BxxEPfFxN9+yQHdqoXDy5BsTgm2hsPZhj2S0HsnDwXPE:Wtq5wqrl1x0hQSjm3PZhaSysDa/ta

Entry address:
0x21138

Entry point:
55, 8B, EC, 83, C4, F0, B8, 7C, E8, 41, 00, E8, 78, 63, FE, FF, A1, 94, A8, 40, 00, E8, D2, 97, FE, FF, A1, FC, D7, 41, 00, E8, 0C, CC, FF, FF, 84, C0, 75, 0A, B8, 01, 00, 00, 00, E8, 86, 45, FE, FF, A1, FC, D7, 41, 00, E8, 24, C7, FF, FF, 33, C0, 55, 68, A4, 11, 42, 00, 64, FF, 30, 64, 89, 20, A1, FC, D7, 41, 00, E8, 04, C8, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, 68, AB, 11, 42, 00, A1, FC, D7, 41, 00, E8, 29, C8, FF, FF, C3, E9, AB, 3E, FE, FF, EB, EE, E8, 14, 44, FE, FF, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
126 KB (129,024 bytes)

The file 0xc0000142-repairkit.exe has been seen being distributed by the following 6 URLs.

http://dynamicdownloads.tweakbit.com/prk/.../Error_1935-repairkit#_ga=1.95365141.880866025.1469329959

http://dynamicdownloads.tweakbit.com/prk/.../msvcp120.dll-repairkit#_ga=1.94859931.641262871.1468948571

http://dynamicdownloads.tweakbit.com/prk/.../IRQL_NOT_LESS_OR_EQUAL-repairkit#_ga=1.248593671.149156988.1469313251

http://dynamicdownloads.tweakbit.com/prk/.../0x80004002-repairkit#_ga=1.221138641.878874636.1469049493

http://dynamicdownloads.tweakbit.com/prk/.../Error_1317-repairkit#_ga=1.133441422.1241160410.1469361276

http://dynamicdownloads.tweakbit.com/prk/.../d3dx9_39.dll-repairkit#_ga=1.264686863.1648458010.1468978006

Scan 0xc0000142-repairkit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.