magic_partition_recovery.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download.informer.com and multiple other hosts.
MD5:
69491784598002fb8fe2155119aac583

SHA-1:
4859c47102b858a899e7b62255ba6d4526fca503

SHA-256:
353d3147450ebb3e7398d2c5be3271986c4630557687be5567084c1245c5822a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 10:53:20 PM UTC  (today)

File size:
13.3 MB (13,959,401 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\programs\magic_partition_recovery.exe

File PE Metadata
Compilation timestamp:
2/24/2012 8:19:54 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:srs56yIjn8DQBNlFH26qK1qS8wYQVoJt4O:/5TIjIQHl86j8wxA4O

Entry address:
0x3883

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, 92, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, 92, 40, 00, FF, 15, 84, 81, 40, 00, 68, 4C, 92, 40, 00, 68, C0, AD, 46, 00, E8, 18, 27, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
27.5 KB (28,160 bytes)

The file magic_partition_recovery.exe has been seen being distributed by the following 50 URLs.

http://download.informer.com/.../magic_partition_recovery.exe

http://it.softonic.com/sads/tracker.php?ev=c&co=IT&sid=8cc691bae73f7f6b11dfe7ad39f87111&upv=87bfe893e88f4d67f0948ab419e4f1d5&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA51A81127FFC242BAF07B914731B5623F7AD563959638657654E0616E7832FB41D2C793FEE6B108DF718D346BF709D9C108E86B40C4A402C04073D14F9FDADD4EBB771096865ED0D9D1447578CF7CBB7C17F31D8102554BF43980688D9CE403114177A6F903A0E85E18E0CB043372AA2E58DE5C53100D8FD17FA092B5D308D6AE7429E119425DCC94432351F21983BDB3&h=643AA7FCC717898A100FFF7DFFE7F9F7359ED3024FA6882BCC6D5F6FE417AECD&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

http://telecharger.freedownloadmanager.org/Windows-PC/.../GRATUIT-2.5.html?ac185be

http://fr.softonic.com/sads/tracker.php?ev=c&co=MA&sid=d43778629d2ba1c343c1cdccf46546dd&upv=2f8c42bd0cafe20b1dde5094d37acc91&z=download-cpd&sk=2101&abp=0&params=32BFEDE632474BF73FB6571EF67B57F43C4B2CE9CADEC151C6982ED91B896EB7D3D713AEFE64BC831F83002CB3EDD6C3E7028F6BDF7DB22AB91BCB39F7AEB876756D56A8F3754E8C50F642DA8C6B4BEED188DE70944E4D4886C642EB7105CCD16BE86C9B43839B54C2192CBFD9A1E59F6193D88B9D7D4A7C156F9F54D93FC6C27B0E0772F8ED0B96C2933FF5B890A51556B534B40FDEE60D74B4BD7260C525E2C1E2895606329C9E4A195F2526B3EFF1&h=5B83C5C92A36DFB044C8BC603CC9CAF27674912CDFE6CF1CD58B03F99A02C279&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

http://magicpartitionrecovery.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAP8H3OMTgXJzFu/IPX5wqZixhBeibpo6fnk0V3NYM/XUSPFe6MuNvE8lQsNm g9EaCYG5WTOej7l6cDbxzJs4YjhYQ/.../qu2QE7JHckTWBJf7sy9b0iUa7gWBzvostJ8fcB4E8IFAsYtQ3OA==

http://fr.softonic.com/sads/tracker.php?ev=c&co=DZ&sid=175b4b80563e422e471585ce533f16ca&upv=97eb752bdc2e7a09004ea7289244202f&z=results&sk=0&abp=0&params=32BFEDE632474BF73FB6571EF67B57F43C4B2CE9CADEC151C6982ED91B896EB70EA1A32B8F98120DD5961245CA13EA21C9DC92173C1BDEB8C873E6EF8CFB874309FC3E50C3B29E67B4513AE46559BEADF8BE16E1184FC615B88340D6B3B83161A93EE68FF15D604DD421290F451EB8D3A2EC7E6B927C5554C99439C0CFBFC494E4558FCE6E1CE81E08A147FDC7A6AF2AE27997D04E53FEF930BE7AA04DC0E73B&h=29D61AF36D156B94D54EB9124F4DFACA55F1DFA1ACE7EE5858F291A3F72655D9&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

temp:Magic_Partition_Recovery.exe

http://fr.softonic.com/sads/tracker.php?ev=c&co=YT&sid=39a12087709e8393d34437b4f1e4d843&upv=433b1b893f6f025eda7829f2ce27a579&z=results&sk=0&abp=0&params=32BFEDE632474BF73FB6571EF67B57F43C4B2CE9CADEC151C6982ED91B896EB70EA1A32B8F98120DD5961245CA13EA211F25EDF74F46102913F91169601FE031A967F438D8B1C737A702502F41463E32601DB553178F24E03ACBB9B3F718E4C3017FD89C2B2E7C0C6DB222EAA9EA3D0DA73B4579F99C4D6229F481F9A7BA7F89313A1F81BF990C5B0B52EFCB961EE9C78BC703DBA1452CD9D1BBE6CB18B4DC2A&h=65745CDB32803F28ED73DF34B8E2EAD5B80E40DC5D2410861F58F8B57E836A8B&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

http://fr.softonic.com/sads/tracker.php?ev=c&co=DZ&upv=f7bf30cd72b78aa003c197505b5b7b15&z=results&sk=0&abp=0&params=32BFEDE632474BF73FB6571EF67B57F43C4B2CE9CADEC151C6982ED91B896EB7842C806E24B1C7A3CD9C5CBA49D4F5DE920C2796CBFA33178FDEED39124DA063A876B996D0395A8191D93BA9CD71642E4FA018A3F21A60291C8A3D8A6871AD93D5C3453ED5865E7D1749104C672687351FDEBCFFE069A1C753621289DD693EF8C027C30A4F8D76DF67A30E7A0C1A3DC0766F6AB4E38D0D87C67C638127BE1154DA23E1BCA60E2DB56D60771D39CC0BB2&h=5D78D07255D0B37FC5D3E92831DB2DDD1A1FD22828F95B9A3B7D3B35E5791F86&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

http://fr.softonic.com/sads/tracker.php?ev=c&co=MA&sid=bf2935baf586146258790081e1373af4&upv=9cacf94843c628953f039f0e248fe8dd&z=results&sk=0&abp=0&params=32BFEDE632474BF73FB6571EF67B57F43C4B2CE9CADEC151C6982ED91B896EB70EA1A32B8F98120DD5961245CA13EA211F25EDF74F46102913F91169601FE031A967F438D8B1C737A702502F41463E327F05EAEDB78E28E2B5CEBC560F551D37CCC2AB26C73E6213071563EA160D3563787FB1A6587A095A3A44012AFF8AE1CEBA68793DC141D7BB4310FC7C5557C8CEF566F5B2F6B37A3C1DE791470100763B&h=AC958D3C9062D2F2A1A98428B89FC65BDDBEA5FD854649E5358FEF6DBB92AC9A&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

http://magic-partition-recovery.it.softonic.com/download

http://fr.softonic.com/sads/tracker.php?ev=c&co=MA&sid=d5e24ffad42578fca1816061980bca07&upv=40acc339bad58f06f3e1945e862fbea9&z=results&sk=0&abp=0&params=32BFEDE632474BF73FB6571EF67B57F43C4B2CE9CADEC151C6982ED91B896EB79EBAC5ACA21B16C291A60CEA15F9FEA3167972819231863901AB1FE3B5C3E76A99902E3C5208FAD03CCB2D59A1E791C8683AD4F174AA8F85F4104503631D9B6466032AA206C0D38CAA9AA9CBE5FA88D788EEBED6FCB80024137BB7CA1676128146F4D6F8A9A3CF0EC8054FC436A2B824BE3E56555F59306D982C1828922DB28DC563E551CB5B78D7D22BC738B754B0E4&h=8E2E134EACEA032E0F2AC7D709C89110AF9D29E7D9000034A84D60CAD296EDED&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

http://it.softonic.com/sads/tracker.php?ev=c&co=IT&sid=576b20ff692090c13472838ee6224137&upv=96a762914a7ba4eac8505787a4297745&z=results&sk=0&abp=1&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA51A81127FFC242BAF07B914731B5623F7AD563959638657654E0616E7832FB41D2C793FEE6B108DF718D346BF709D9C11C85B1203E78576F0C98E42B9501F8596B7CD680E26110594829C4D25F95F67F6BB4C2598800D3D8CA8D89DD96892B16C6DA2B50EDA6FBCAA41A861A10456764C0537B02B226CED7AFDD91E164A4472AB3516954E8EC6E7D4FEF2DDDB259F9D5&h=A0981BEF12EE5C05E78B8B564157C6B9E3BA127D55D3BBBF243197484D26EF1D&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

http://fr.softonic.com/sads/tracker.php?ev=c&co=DZ&sid=e108352afaf9b9dc2e1fbea635c6c33d&upv=314509462cd742b6a3f7ffa1bb1e5cb6&z=results&sk=0&abp=0&params=32BFEDE632474BF73FB6571EF67B57F43C4B2CE9CADEC151C6982ED91B896EB70EA1A32B8F98120DD5961245CA13EA21C9DC92173C1BDEB8C873E6EF8CFB874309FC3E50C3B29E67B4513AE46559BEADD74E1DF900818A38D693BC84B6EA53A07CA2B9D64A0EF3591AFDA5E9BDFF372DD8062CB789F66417C809CB8275EAD61AD7543767EFADE1040928CBE5A6CE75375FE0EBA0402041DC4C55799AA381DB64&h=736AEF085011C1E4C3D30E9751F39F95E3BFB52EA8D09F1CB30388234FEDC5CC&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

http://magicpartitionrecovery.de.softonic.com/download

http://fr.softonic.com/sads/tracker.php?ev=c&co=MZ&sid=08f238e9f8f822238a757409dee6e889&upv=f7a8b08e1cf948c2c4a4cefd1585183f&z=results&sk=0&abp=0&params=32BFEDE632474BF73FB6571EF67B57F43C4B2CE9CADEC151C6982ED91B896EB70EA1A32B8F98120DD5961245CA13EA21C9DC92173C1BDEB8C873E6EF8CFB874309FC3E50C3B29E67B4513AE46559BEADCC95AFF42D177BF2A3CAA7CF7BA6195E3C2A2E74758EE5BC4609FCF163412111A688718D6B1340CF60BBADC654B4437A109B2401E82B1250393AFFAB34E5156581E89EF0546CE54BCE6B57D6821C4D9B&h=A50F615AC0E50B04ACC2C5BFC2E8E5B132A7A17D9CF2696CB1491B7F7B3FA71D&directdownload=1&f=3340815&d=http://www.magicuneraser.com/.../Magic_Partition_Recovery.exe

Latest 30 of 52 download URLs

Scan magic_partition_recovery.exe - Powered by Reason Core Security