» btballoon.dll-repairkit.exe
Overview
Analysis
File Details
Downloads (17)

btballoon.dll-repairkit.exe

PCRepairKit

Auslogics Labs Pty Ltd

File name:

Publisher:

TweakBit (signed by Auslogics Labs Pty Ltd)

Product:

PCRepairKit

Description:

PCRepairKit Setup

Version:

1.7.1.0

MD5:

ab87214f07502c06538c6616b26b16a9

SHA-1:

c25aed172097cef6a3b8a544460e3a974440126f

SHA-256:

cc8f1e027d03c1df47f297f6ff6f1b9dddca3ac99ef85228c1ceb48f9919617e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/16/2024 9:30:35 AM UTC (today)

File size:

420.7 KB (430,824 bytes)

Product version:

1.x

Trademarks:

Original file name:

pcrepairkit_stub_installer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\btballoon.dll-repairkit.exe

Digital Signature

Signed by:

Auslogics Labs Pty Ltd

Authority:

COMODO CA Limited

Valid from:

5/15/2014 1:00:00 AM

Valid to:

5/15/2017 12:59:59 AM

Subject:

CN=Auslogics Labs Pty Ltd, O=Auslogics Labs Pty Ltd, STREET=L 7 222 CLARENCE ST, L=Sydney, S=NSW, PostalCode=2000, C=AU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

3D697A20890658526AB2F4CE3926AB80

File PE Metadata

Compilation timestamp:

4/5/2016 9:48:59 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

6144:4EtP/S6mjDWQkhXGzkQSjm3PZhaSysDaUfe:PE6GKQgtQn/pys/e

Entry address:

0x27138

Entry point:

55, 8B, EC, 83, C4, F0, B8, 0C, 45, 42, 00, E8, FC, 03, FE, FF, A1, 5C, B9, 40, 00, E8, 06, 4A, FE, FF, A1, 94, 33, 42, 00, E8, B4, C8, FF, FF, 84, C0, 75, 0A, B8, 01, 00, 00, 00, E8, 0A, E6, FD, FF, A1, 94, 33, 42, 00, E8, CC, C3, FF, FF, 33, C0, 55, 68, A4, 71, 42, 00, 64, FF, 30, 64, 89, 20, A1, 94, 33, 42, 00, E8, AC, C4, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, 68, AB, 71, 42, 00, A1, 94, 33, 42, 00, E8, D1, C4, FF, FF, C3, E9, 2F, DF, FD, FF, EB, EE, E8, 98, E4, FD, FF, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

6.5154

Developed / compiled with:

Microsoft Visual C++

Code size:

149.5 KB (153,088 bytes)

The file btballoon.dll-repairkit.exe has been seen being distributed by the following 17 URLs.

http://dynamicdownloads.tweakbit.com/prk/.../0x80070643-repairkit#_ga=1.120155855.658094163.1462284817

http://dynamicdownloads.tweakbit.com/prk/.../0x80240017-repairkit#_ga=1.62284332.1202645215.1463093965

http://dynamicdownloads.tweakbit.com/prk/.../Error_500-repairkit#_ga=1.3209328.113138090.1462027972

http://dynamicdownloads.tweakbit.com/prk/.../sdl.dll-repairkit#_ga=1.240720138.885800921.1462589715

http://dynamicdownloads.tweakbit.com/prk/.../Error_1603-repairkit#_ga=1.20973880.2082204486.1462910766

http://dynamicdownloads.tweakbit.com/prk/.../version.dll-repairkit#_ga=1.9479165.914850856.1462508300

http://dynamicdownloads.tweakbit.com/prk/.../0x80004005-repairkit#_ga=1.15050421.284232750.1463907623

http://dynamicdownloads.tweakbit.com/prk/.../physxloader.dll-repairkit#_ga=1.32622970.576180446.1462959216

http://dynamicdownloads.tweakbit.com/prk/.../d3dcompiler_43.dll-repairkit#_ga=1.10993981.848678121.1463052719

http://dynamicdownloads.tweakbit.com/prk/.../0xc000000f-repairkit#_ga=1.105851844.654802057.1463360075

http://dynamicdownloads.tweakbit.com/prk/.../0x0000007e-repairkit#_ga=1.239676355.1505020603.1463745321

http://dynamicdownloads.tweakbit.com/prk/.../0x80090326-repairkit#_ga=1.148228788.268810637.1462662996

http://dynamicdownloads.tweakbit.com/prk/.../0xc004f069-repairkit#_ga=1.226529753.555485628.1461760719

http://dynamicdownloads.tweakbit.com/prk/.../0xc00000ba-repairkit#_ga=1.117945998.687414385.1463683854

http://dynamicdownloads.tweakbit.com/prk/.../kernelbase.dll-repairkit#_ga=1.123754754.947868942.1463595704

http://dynamicdownloads.tweakbit.com/prk/.../igd10iumd32.dll-repairkit#_ga=1.164467391.1634627885.1463480529

http://dynamicdownloads.tweakbit.com/prk/.../osetup.dll-repairkit#_ga=1.121892235.1861784204.1463485350

Scan btballoon.dll-repairkit.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.