home

advanced rar repair v1.2.exe

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
bdee9c829a4325e33719c64a63eea0e2

SHA-1:
98ed237fff186f4e9060190409d47997f746ad9d

SHA-256:
1a6aa004b5d530215e29297500b715ef28119b37a59e251aa4634c40506f7b6f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:59:49 PM UTC  (today)

File size:
752.5 KB (770,514 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\advanced rar repair v1.2 + crack by rezman1984\advanced rar repair v1.2.exe

File PE Metadata
Compilation timestamp:
4/25/2000 4:37:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:x9JaSfasxSjO7uMREWd8oO3J9BX6sNSGPT0fgrwl1Yplrgm5gTztmGA:xPapsYghtd8oO3vFvPT0+qKplrZ5YBA

Entry address:
0x21AF

Entry point:
55, 8B, EC, 81, EC, 2C, 05, 00, 00, 53, 56, 57, 6A, 01, 5E, 6A, 04, 89, 75, E8, FF, 15, 54, 40, 40, 00, FF, 15, 50, 40, 40, 00, 8B, F8, 89, 7D, F4, 8A, 07, 3C, 22, 0F, 85, 90, 00, 00, 00, 8A, 47, 01, 47, 89, 7D, F4, 33, DB, 3A, C3, 74, 0D, 3C, 22, 74, 09, 8A, 47, 01, 47, 89, 7D, F4, EB, EF, 80, 3F, 22, 75, 04, 47, 89, 7D, F4, 80, 3F, 20, 75, 09, 47, 80, 3F, 20, 74, FA, 89, 7D, F4, 53, FF, 15, 6C, 40, 40, 00, 80, 3F, 2F, 89, 45, F8, 75, 28, 8A, 47, 01, 3C, 53, 74, 04, 3C, 73, 75, 06, 89, 35, 58, 53, 40, 00...
 
[+]

Packer / compiler:
Wise Installer Stub

Code size:
8.5 KB (8,704 bytes)

The file advanced rar repair v1.2.exe has been seen being distributed by the following 47 URLs.

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1448369139&Signature=HH4dNGav36gZT1cAM3tg6nhuCp2ADWcOzNbxSW6D0daeFLTZxnrZaNRmIMypyjCb5ag7yDe71yF0KuLgXukd3aRpYKcJqw0l2PLyMbtxL~4v8bE~6dJDa19~FBOtJ6CvascKCkeLg0IkjiiPdnCiWJIFRwV2CKbBgaBYT6INY3k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://pf.toggle.com/s/1455846962/pt/.../6/66650-82934-advanced-rar-repair.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1444650960&Signature=NMwysQ3209sSEwBr7aJw3TU1M90ZONazbb6DoAIUOUgeIk2OkL8icMaDO7Awb-~7H4GxLIkStdjgxtbXlc70yfpf1GnP~ed7D9TopHifvMsHya-715bBxrp6EdNYRvafrGQLiBP8AK4d-Rm4wxxpVVpjEuXGnOzy7XRN~drASrY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1422349149&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=L16~ESbf9XD94Rk0waeK8qWLaH0ycIj1G200wTL9jkHOmgexky6W~HPmphCtuUk1SmLgk9~PvhG1ivMGKkixqqxwfGUquh92LR-oukuO~WztOajOH1qRub4W3eBC6mYu35HMQy8PcP6dkRVS5Ay94~z~jhCMeRBxJn5eb-6GOEE_&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1430637558&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Z2Ydga-FXLu-p0jbTwPNC-IrXsxDm5fWPLtSE0XUjGy2-TjOtJDySd0Gy7EAwsSXhzm3oulOHm~dlr9sA86uKw0CehSp-R1SMwDt9hvZQ~czaQ6sEiqjfw20WVzGdf1TOGKUlWLVO6k4MzPagZUuGTShXgQvDM04i6aJZziqg7c_&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1428105822&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=dP-f0aVs6qbJh6CMK0Y3ptKo2OVdnW6wOHjm7AlqbAoXGiwI4fnCcIZJ37d0E1lBdKov0wUxDT13lybRjfjvjdyxEQrEMQMO~kDdLXB9PFGlSv6MnnZgq4LcWsijzMpeLuZepYwUNLPDH~p7XZQ2ioFXRMPuIw1AchzzMajTb4Q_&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1437708004&Signature=BzIMFqK~bP6~nVtbUsRvz5YM9Y~fjT0dYD1hLHObFRHsMPrhsEeCZa0~avuhxvpzmdbRW3hIp6~~zWHBV06VejGvvPU1T9KtAQkcE~5hONd7TInz3Yl6XaRUroeWFZFY6ZnVCBwSOUlmfyeXnbnDffNgoaOlLaORo~tsNyTljW8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_en&type=PROGRAM&Expires=1433404073&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=O-iD4et8vVJgknRJf1ZWLFCY0BLsb~QlMpYLDBwyKxYlfS287tKliCubLHE2pI~7gD5bNhBuVggbTEHFMzIZ-kt30GI~jDc~WqqX6efNKXUx6I0j-CQd6YK3Q~PVxewkGrUJJE4Ipn8N26GSHLnatqVc3qlmIQnULpx0-ct79xs_&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_en&type=PROGRAM&Expires=1445603440&Signature=FXFUOWObsYDlc~WofF-HyNjIF9x5Y7mQky4HFftcG4COPo8yPApzbnGxlarf7XeOfBX56-Y4N2X0sJp1arZ0~XrvJg3lr1apIFlMINoE0SeYvbPgppEP5S20mkPfKmbvC3xVNZIpBVFXHKbLi1gxOt4B8tG~RpZmjXUSgIDSu-k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1451692942&Signature=ixuL3p9wcA8hg219NreTO3hGHGkOdzPpyN43~Ppi6KOWY1BqLnOheZoxCDCvZyLD2pyUFRhpYPuIBfgtMDgrWi6iHY2awYaX-XKuBEdEF9bUkCENmGcZGAbNkdOvevafeb0fIaA~eKQRQ5dha8zi4yp3bz2chmNtJ6xlBSWafgY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_en&type=PROGRAM&Expires=1435625780&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=f45iNVbvze2TzcRGvzYozapjuSXB83IWNZvFKBu7WqtYormMj5DL7qcAMv1tmIb2L7j6JCMkoQEp5ohBsoNCWNgp86lrVvqa47kvXrqxb6LJrxayUKxZA0udMTQUNlaO6OA3ZMVfbUUvXXRyHaBJEhnAhQM8uLfR66Av4uPCdvs_&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1448872532&Signature=DJvFugCEdLdRGWp6iElC5xBH8s-be8kRa-Ioswkqm7mnqsOtdn3H3yq~E~aPuMYJRMFsDXjap5TnTiVhje6ipXPj9DczZ7tx~xHDhZDkhn5XeZEmEU4c8IzkpU-jHIsFaVv-ALNNKblxFDKd9ahwZzYMzde9tURWSSlqx03wFAU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1444356694&Signature=SyBoPwo4WTmCtmUtOYfus2DVntBtCCzTslpOOhOFJ6o~sIN2hv1a42H27fpLWn85e2pvYGQYgcKSdwTEzRsifUKN-bL319Ca6xiM95XZo3m-bn5DvrT5dNmBE1AjaQl-og0nZB3BXJDzwBlstcmfRL0YJ65F-jkK1KfBWt3YhAo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1449460180&Signature=Q-jJnkTLEzlBCcWGfiTdI0TX85mSqZ1hizg236FjYBGE1dp7E5bsbYtyU2fOv0b5KL-w-VtXLyn0XB4U1TX59XLbcP11qdVDOliGjKeP-gg5SBd2w1~koRzYIhnhcxnMZOxB7eaPvdJ9O5xai946UoZbMDwDYx3wdKrr7QDTttg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1438322036&Signature=eAFYdRaIXaozrvvRK4ZMryPfCjek68uWCDYtfvMWSSf4DbTLttjd-zqj5UDbJ63tZcZEsJohSv809664Zw5cXFTpkKVwgl8xFf~U4ZC-0Kcs0mVW-cYHXF9-rVBrxV~-07zupjgg6zFc7TkJk4VxY~HCttLqcofEZD816c7tG38_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1440064338&Signature=QquPtWvli4tiu9mXRnCWF3BnvZIzIeQaPrVmeoXIRGO4kDLQXpRsL8zhiFLqPAL8qv604vsDbsiy5r0JahEv59DIxJO8ircwjdtGmagpK66zQv5I~M28Ey7kAZ0YUZ-0Yho0hw44HUtXexreUWJDAHYTG7SoGBkx0ZndOat4nNk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1425439270&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YeCWKRz85yhVWEYZAprYFpx44fnFvI3W52GnzD4aKSEtkwxNiwbr2AQHe0uue7~8y8bP0W5hhxkoXboM02l5-~bRtXnaFNkTek9DmACTmUW~3haUM-hXljYs-VdeAmC-4T-difzsfeJD4lwlra~alR~KI5BFPhGAH4xTQtG3sgo_&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1444805526&Signature=Z1kNZD136K2gdzHMkeARHgOcJkr1kUSim5S468n87KiF6-JUCmAZLpVtJjVGT5BqiGheygNClNBRFjng0gg-iNXWRUzsiKeNq3Ff1M-X-TqKwQhzEBmWAumKZbUzEIscZSqaTAs3p9dDe0TyujtSp2Dm82PcahqLRCebZxywx1A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1435800123&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HO3gEJQ7i8zblRO3xLWsb07Bks3ThxR2xnmiMiPmEFpXFARk~ZuHB49eYP31PIkJDXliN-YNv2iOb4S0e0cSeLahx2mzBdNBVuXHiItNyvCK3GWkKorAbSQOO4-A63Lkl8VzkJ5PV7STiJlf~yVorw19tsgtxBevVOoN22RgT3M_&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_en&type=PROGRAM&Expires=1446693802&Signature=QHvz6nYrhi9T-S9J7ncXzmDASmitgPChk0yJy45qUi2sTAk~brgNh7e5WNh1ija-JpyhWXiq4H1vSYQ3fqWvxKMBA9n5DP4-~DRwvCLSwUwViisvaDUdwxs88-AXpiZR4~0HyuI79e8CM~K2XdflW3kjmiRxVIe5oSM4VDBNcmg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://am4-r1f4-stor09.uploaded.net/.../da339cc3-b37e-4095-932a-8b25cef04b46

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_en&type=PROGRAM&Expires=1425678709&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=hFCI-0YOH9AgBpV8Dt~TN1RMQauJmBPCXlDlqTYyMEEKCHy-lwfxcT9YT0Hp~noyL4Uoe8l3U~9XhlyHIdI~ErBemqt40rAVO4beRpBaO3ZWknYsr~FiGiFxL8ZsLWzDPbd3evu088WfENz21o0fhtEcL3yrMJwqgqCpddYJjA8_&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1439792272&Signature=WWV6M05RWzr03Hr4Yac9YFOqRc~itzGRggOoKD6pN1FQA5rVB8SuzbirlZdfvxKsKqqI0zysjUnbGOO3EDRuis5CbtAdzUjtKVkz5Ejc3U-PekzRRIVC28DRLBMc6Nk6DY1ud~TnO7oNLTwWET9435D6Yuri-YB5o16YVppsQho_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://advanced-rar-repair.software.informer.com/.../

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_en&type=PROGRAM&Expires=1450223612&Signature=Pv-tBkYUOKHLDx153qSEDWXYdzf~CIM1aWVHOvL9QJCv-tIhVN9OtC0WpQwAlQVQsdprWjYLzlCWT6TceXF27BAR~h~uM5i-U6jblKvfJubgaSRDldbBKbyq4b5MGuDri7pVB4DKiamV-aetPWQP9eQ2y8YL-hTYQanHAZzgOOk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_en&type=PROGRAM&Expires=1438090635&Signature=W61bMn~DQAyEPGaYmh~ur7jQoX-wTU2aZ5Ha8zLAUff2GXdU96SBqAm0qghHlTkWZLTycSoWznJdVwkp-Mkg-1K3Lr1JRJmUPp40WP2adQT~3JanOdX-nQ2H37H8O-paYHt~sr~C-2l57kWd~zq16NBYS1MyaFaDveoq~cX8AVE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1429605512&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UHr1plkzis~~btCRFmO~xd81F-giNFEvv8BpmcSMbIi55bMlCoTbvNluuA6fg5~V2q8TvPe7sgWHXwfhKxDdAhQvX3Xzjmg-LM7D47L3M9985KdXCAwWbUPQLRRzbeUjXII6I2tuDLGwHUyVebGP~93zcypbb7qQSHPDYSTPB9A_&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_en&type=PROGRAM&Expires=1442043418&Signature=iC4doYRCKeOk1YJtCf8ScpGajlafTvetVXAcsX7nkt~Iz8Eb4VPlRa8gj-Q8MYF-OprrifnnP7b6AzW3VnOv5oIGdNLs4OGYAgLiQFnBYLwRHyXraRRyRS-KeCkava~cG8Q7oOfzyX3vzw75uKZxSUnQbhWrTHA57hQv6vqXe00_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1449488213&Signature=Wu-~ONn1sMl077xVcPxeIJhgcA~rp54d5t51G7CrN6eXo5So65W16vMXSeHLdJzP8QmM9M9cyuBepk12TjPcoqgTwkAfudrmKMgPUxh9v44J09wemiVmScfzTd6htrA8pfAS5gmrfvwIux4YyeeGQ~ML1dPdeOhptJlpvHgEWzY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

http://gsf-cf.softonic.com/98e/d23/.../file?SD_used=0&channel=WEB&fdh=no&id_file=54126&instance=softonic_es&type=PROGRAM&Expires=1437441843&Signature=KVDVRZJPC~uuEyeaSTEgIQVC4DquJCF9Lr7zYKHaWk3NwlUDXv7YCsV9d3JHnJ1Qmx8Mir95INCIUKMZXSfaaT0USjck0dqe7A54xuWU6a0wnD6fqcG2OczbwEWszTTupFxKSYnWGpmlg1x33O~MGlqM6KDvDFwxFepQjmuHF04_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=arar.exe

Latest 30 of 47 download URLs

Scan advanced rar repair v1.2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.