home

RPStd.exe

Reparo Standard

Leaders soft

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Reparo Standard’.
Publisher:
(주)원더비즈  (signed by Leaders soft)

Product:
Reparo Standard

Version:
1.02.0295

MD5:
a78957a1e8c9e090e1cfe109d762a771

SHA-1:
588c7c1a847b9490384761a1528f1dcc1b57d5b9

SHA-256:
62a3d5deb2a1fbb9b494e31a5ab7685d5a07731f658d024c9536b7bfc7f55fd3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 12:33:05 AM UTC  (today)

File size:
270.5 KB (277,016 bytes)

Product version:
1.02.0295

Copyright:
(주)원더비즈

Original file name:
RPStd.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\reparo standard\rpstd.exe

Digital Signature
Signed by:
Leaders soft

Authority:
Thawte, Inc.

Valid from:
4/20/2012 9:00:00 AM

Valid to:
4/21/2014 8:59:59 AM

Subject:
CN=Leaders soft, O=Leaders soft, L=Geumcheon-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
377D5A793CA833382820435798403063

File PE Metadata
Compilation timestamp:
1/11/2013 11:10:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:QbkWv2ZRqjZZrGrjrEcdQdPZOfkEsleAaVMDEg87OwP5mTKj5mTNFrpg7gg:IOa+dQdB8kllez

Entry address:
0x12C0

Entry point:
68, 10, 13, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, FF, 36, C3, D3, 56, 2E, D0, 49, B5, 85, DD, 90, 2F, 09, B3, 71, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 41, 00, 06, 50, 83, 02, 53, 74, 61, 6E, 64, 61, 72, 64, 00, 00, 00, 00, 4C, 00, 6F, 03, 00, 00, 00, 00, 56, 42, 35, 21, 36, 26, 2A, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 7E, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 0A, 00, 09, 04, 00, 00, 00, 00, 00, 00, F0, 32, 40, 00...
 
[+]

Entropy:
5.6984

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
208 KB (212,992 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Reparo Standard

Command:
C:\Program Files\reparo standard\rpstd.exe


Scan RPStd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.