home

ReparoStd.exe

Reparo Standard 2.0

Leaders soft

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ReparoStd’.
Publisher:
Leaders soft  (signed and verified)

Product:
Reparo Standard 2.0

Version:
2.0.0.1

MD5:
d494dbe54cfa4837ec2796733615bfe8

SHA-1:
2c4c7c2e412479b49563b6bc497d664f73393b98

SHA-256:
fe12fbfaf55293b2454ff44c434aef54ffb632b92b11ccf25a45ebfb6c856a33

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 2:50:43 AM UTC  (today)

File size:
2 MB (2,066,672 bytes)

Product version:
2.0.0.1

Copyright:
Copyright © 2014

Original file name:
ReparoStd.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Leaders soft

Authority:
Thawte, Inc.

Valid from:
11/13/2014 9:00:00 AM

Valid to:
5/10/2016 8:59:59 AM

Subject:
CN=Leaders soft, O=Leaders soft, L=Geumcheon-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
554F5BA903E1D0439D691A249DFEE444

File PE Metadata
Compilation timestamp:
2/17/2016 11:23:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:1oQeJZqSUk6XvMMQDqC2ilhKF+7Qi7fir6TdpKxywwYra:1+JZDG0JNKF+zpnwwY+

Entry address:
0x4F6000

Entry point:
56, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, 20, 1C, 00, 2D, 08, DC, 0B, 10, 05, FF, DB, 0B, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, 16, D0, BF, 6A, 68, F1, 18, 63, 50, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, 55, 4E, E1, 51, AD, 41, 00, 00, 9B, 31, BA, 60, 0A, CD, 94, B4...
 
[+]

Entropy:
7.9491  (probably packed)

Code size:
375.5 KB (384,512 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ReparoStd

Command:
C:\reparostandard2\reparostd.exe


Scan ReparoStd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.