home

rs-repair-mov.exe

Remo Repair MOV

Remo Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Remo Software  (signed and verified)

Product:
Remo Repair MOV

Description:
Remo Repair MOV Setup

Version:
2.0.0.16

MD5:
f2b604b8ab74c44dac26fa92248adf05

SHA-1:
6209f84b6038226eec2c2ae4e3729ff61c536fe9

SHA-256:
3db7de925b6a882d845c4ce5af662a1b91b9e517d9bea4f4f3d39438d9622657

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 7:56:00 AM UTC  (today)

File size:
7.9 MB (8,329,216 bytes)

Product version:
2.0.0.16

Copyright:
Copyright © Remo Software, All rights reserved.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\temp\rs-repair-mov.exe

Digital Signature
Signed by:
Remo Software

Authority:
The USERTRUST Network

Valid from:
1/17/2011 1:00:00 AM

Valid to:
1/17/2014 12:59:59 AM

Subject:
CN=Remo Software, O=Remo Software, STREET=18/10 3rd Floor Saleh Center, STREET=Cunningham Road, L=Bangalore, S=Karnataka, PostalCode=560052, C=IN

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00A31521595BE443AD7CC930DAB868D516

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:pjqPui3BuPZKUpO/uSm7mwu4LS0wPw+olAqSV8:pjqGPNpdj7m0aUAqSV8

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file rs-repair-mov.exe has been seen being distributed by the following 17 URLs.

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1483998828&Signature=OHr9sOVY-t35dxzXN1MSrXKcnoK9la57KzRd5CRw7dr2WLTeKiHK6g-bMyibcNqleIFzvaL7EBFEUEHZGh37j2yMwVUAwuOqoT9daTu67Q~zg08ofs~AUxCRuSlMBE7jJG8pyMtZSGUOakiQRzWJgW5fxgxxxBkOoKJR0KWc2uo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1485221991&Signature=Qal0j~JyBBVwOPaXCbCG6hg5wWJAThlQI6R9BLR7O2-piypVQpXjQJQGmGuZSfA~dEwwV4PwdsBN3dMZGTi8R65SZuSSiHxXTzlZ9TR7hmy6~p~wHOiSkEiOnyiDZ3tfKAiW7NuZS2PT71gcSUwY468VXTqLOo5yhcN~BbX3Zt0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://www.rusc.ru/?miror=MTQ4MTYwMDk4ODsxOzUyODI4MjhjZDdhMDI=

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1467972012&Signature=Kr0zsXpl--32RbpRlXTsq1YIBf93SyY0UOzmbZxI1p4EIHCeBRJ5r59LtdT7INJyrjhBgEd-m432xdpny6LhdpDqxYvHJC~D9~iVJ6Az8VDIuMyLjaY-6tD4o7C3j33anaW1I3heD8dcneheY8W8i4DSi6OPTbqC9UvPFOu9C1o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1478597268&Signature=dUK0SIjDsruLgvY16Uzlm~ft4omWSEGFCpSUJ~ZpadJSSjCmkHDeoj7qaY7BSV-7uASDfRux-YS-JfnhjCtCraY7tzr2xIomvGUtbCENaQ-Ey2RpOW4Png125a80YapUYzDbrqob5ibOQnEhvCfdXkirMKfLsraPX9k6BjRv6rs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1470412463&Signature=OrN2ltP2ubP1zXxxzHecEX1iOnW4LyZYYshEK5wDnhsIci2NDJGmp1esnccVAVB37wRbjrclRXE~3T3yq211Az6ZtBeqoKecGb3Aafw-crCzV~iLuTNsgIDURM5hTPj-xZicKupP9M6tCxyqGeZQQJTv1CV7mKO~bblLvcSSCs8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1469255667&Signature=gMC8BGOWB-2hsdOr039xRY8zfO3KOf-rUJM8MTDkVY4UlNWmbAPfS7dkCBqGD5C8YzSZF-MfjkBGt6~26bXJ4QpbylJjIF1nHxLGTCcqPy4MR73Ak8Os9yOQuAVUU68SZMN3AjuxuIa1JEV-aThlFjLU3rn-UC3oP6c4OJ1CmqQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1450924932&Signature=Z1ajCO95FVrXm5ZmvWf--5d8ZHLwjwaZdW7tYer0EXVUMgvRU2LSSel5qPDdD5hip0veLstoZJUhxAj5SrxxJTGi7Pg9SRWxtpKULAOC26QN~3yhNQEC0-j6RBp~9qCsu1~U5d6qbvsZQVQ99SElWa9YQnquRciiAB7FBl7EjJI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1464088397&Signature=L3NwPztfuPkRhkWjdq1MpuU6395yFRbHwHtNPXjKJVwuVgKaJZ~1ijfRQIQniAJypim10VJOzMBZVwxqlRJd~yT-83q9KM4tBcRn8lBCsHW57Gcf7Ic-0wlqYAA7eKGlROQ2~fbCPfg7prf0HynCBJDOF94NCLxHI-PtBhCWzdM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1466222459&Signature=afDYh5eYCSnxGO7QTHS0xA~AeTKl-IJhS6PGWfGyzpFYfXdnjQbQFeVv4RZ5Ei~c7xes7l1b1YqH9cYnUNKWOFhX3ZiDpDXm0urQpxGwj-0t5~RIYyAbBUR~oLMfwd4RW0HWrHncUsNpQHLo19bvP-IBDUaV9YmBsw0WJlCU-AI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1436266163&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=hhSIGVujpi6Za-lHfgEZijw66JOlRCAMF~tbyDSXz9s0PSlzKIMA8CzpKIC4fALyT5UBG4zfcd-M168keCxgU3oVRIY7Lqrkn-TG3ljsbSNrzrx3Lrmq7pVJguTMB0J8Z1NLk77B-b591vic2QJr8t3fPd8UG1dLODcapr4f3uM_&filename=rs-repair-mov.exe

http://www.remorepair.com/.../remorepair-mov-windows.exe

http://www.howtoplaycorruptmov.com/.../howtoplaycorruptmov-windows.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1441478805&Signature=Q14PszpRJWuxPibo0KEyVS3692zqoL5icY-J2H7q581R~1sK5V4HrpxNWK91OHnX6H0GB2PkKyDVMbC-wjjCVJm4yogrgHsZ8tLesz2CHr8Uljjf~ke2z2g6ikIWh24ekhMLBYk39mmuh1FbBrfOhAalh4rI6lGrSdfG9P76g1s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=rs-repair-mov.exe

http://gsf-cf.softonic.com/620/9f8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69668275&instance=softonic_en&type=PROGRAM&Expires=1432772541&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MyiJrzaiK57dqCUEIbipSQZNfQ8qyH8bXmS~yMFu-D8cjvt3fH-56zY3-ivxCdNwwD4RrO2lPPOwtllPz6s9FRIoaAi16C0BIBQB1wemX470Z1qEM-iBiByioRVbPB5JVPxu-Ff0gV-Rzx1TUGDDeZTuwc4WIBleA~YUF4tJ4k0_&filename=rs-repair-mov.exe

http://www.mp4videorepair.com/.../mp4videorepair-windows.exe

http://download.remosoftware.com/remo-repair-mov.exe

Scan rs-repair-mov.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.