home

boot-repacker-4.0.1.exe

Boot Recovery RePacker

leszczu8023

The program is a setup application that uses the Nullsoft Scriptable Install System installer. The file has been seen being downloaded from dc403.4shared.com.
Publisher:
leszczu8023

Product:
Boot Recovery RePacker

Description:
Application

Version:
4.0.1.0

MD5:
5fef48124479f6fbd3c91c5639f86b1e

SHA-1:
de1bafaa038fadcb33aefa73d3068e88f23a9b00

SHA-256:
6f3a51bcdc2cb70748895cb19f008f96d237c55039d0bf325ea10b0315b4554b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 5:15:31 PM UTC  (today)

File size:
6.7 MB (7,032,462 bytes)

Copyright:
leszczu8023 © 2014

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Common path:
C:\users\{user}\downloads\boot-repacker-4.0.1.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:JpaUVefqzm9T/vTx4hsX0EnS9QVT0aW2rTRrRl7fFECy4psCKX9l4vTzuhWFw09f:JpazfqzQ/vT6h41v9r7tLpsbNhWSLtU9

Entry address:
0x30FA

Entry point:
78, 02, FF, C9, 71, 08, 8D, 35, 15, 29, ED, 66, 18, F5, 85, C8, 71, 04, 0F, AF, F2, 49, 3B, F0, 33, F8, F7, C3, E6, 9F, 81, B6, 86, CE, F3, 22, F1, E8, 00, 00, 00, 00, 58, 8D, 15, 5D, E6, A2, B2, FE, C2, 68, 69, BB, 82, 00, 80, DD, C2, F6, C0, ED, 80, C6, 3E, 85, D2, 2A, D4, 0F, B7, EE, B7, 88, 43, 0F, AF, D7, 88, DA, F7, C3, B3, FB, 42, 8D, C6, C6, 76, 86, F7, B6, 41, C6, C7, D9, 8D, 36, 8B, D5, 86, FF, 8D, 2E, 81, E2, 18, 29, DC, 5A, FE, CA, B7, 94, 31, DA, 55, 81, CB, 6D, CC, DB, D3, 8D, 1D, EE, 37, BB...
 
[+]

Code size:
23.5 KB (24,064 bytes)

The file boot-repacker-4.0.1.exe has been seen being distributed by the following URL.

http://dc403.4shared.com/download/.../boot-repacker-401.exe

Scan boot-repacker-4.0.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.