wordrepair.exe

GetData Pty Ltd

This is a setup program which is used to install the application. The file has been seen being downloaded from www.downloadcrew.com and multiple other hosts.
Publisher:
GetData Pty Ltd  (signed and verified)

Description:
GetData Utils

Version:
1.0.0.49

MD5:
a5270a1e38731c01893e00c69d2ea610

SHA-1:
d232816e6605733388528d1a0fa74639c7c3c95d

SHA-256:
a328caabb7f1f6681c405c897f55f736dce0b7ae5a9f7ea60a14ce5c1147ec3f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:34:47 AM UTC  (today)

File size:
1.5 MB (1,577,592 bytes)

Product version:
1.0

Copyright:
© 2005 GetData Pty Ltd

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\wordrepair.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
1/2/2006 1:00:00 AM

Valid to:
11/26/2006 12:59:59 AM

Subject:
CN=GetData Pty Ltd, OU=Data Recovery Software Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=GetData Pty Ltd, L=Loftus, S=NSW, C=AU

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A04E0B09C654E61F94F957BC9C8C4B9

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Ulow8yOuz/L1cZ+sjPUnAY2RGH3HChUo/7Gazv88iF6apVVbyT78whMRoa:OH3GcsjCANRGH3iuo/VExfHyT78wooa

Entry address:
0x134A1C

Entry point:
55, 8B, EC, 83, C4, F0, B8, 1C, 46, 53, 00, E8, CC, 1A, ED, FF, A1, F8, 93, 53, 00, 8B, 00, E8, 8C, 91, F2, FF, A1, F8, 93, 53, 00, 8B, 00, BA, 7C, 4A, 53, 00, E8, 8B, 8D, F2, FF, 8B, 0D, 30, 95, 53, 00, A1, F8, 93, 53, 00, 8B, 00, 8B, 15, 80, 36, 53, 00, E8, 7B, 91, F2, FF, A1, F8, 93, 53, 00, 8B, 00, E8, EF, 91, F2, FF, E8, CE, F6, EC, FF, 00, 00, FF, FF, FF, FF, 0B, 00, 00, 00, 57, 6F, 72, 64, 20, 52, 65, 70, 61, 69, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.2 MB (1,260,544 bytes)

The file wordrepair.exe has been seen being distributed by the following 48 URLs.

http://www.downloadcrew.com/?act=software.download&id=28099&t=1486943894&c=209e0c12db1aa7d24b6d73ade1b7bb7a66680535

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1488230803&Signature=faqCE7lY-~ck7cXWVglG3qDY27FxzQ9GpTHdiRdsR1aS2Wo-EiIqfRGveOrJb1CqiEL5DfCG5WQ-o1MhPomt9KC5KgjgatknXq8en6FqLwxeCOd5LV~96Q3rOVnFl~rnnuq2rDnstdfm3-PTvsptifIup~lOqwyUQMOFIhCbI44_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_es&type=PROGRAM&Expires=1425419460&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=GzScW9PxwbxNwg-HJ4aAn7Ph6SFRYoqDJ~L-GdRi~cepZezKADgR9cc9tDfp9Ngp3RuW29dQc~dB21~~tzAHA-GGd1P-HN1R4zNCe3n1RfEhI5R-OHY1dhuULD7TJ9HkIwuyOyNu9HjuZbjOF9z94mex4kojP-BFbfSpIPv8A1I_&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1481879049&Signature=dtKOJ2VrFJ6HOC3ISxqm539lBWspKDx7QC3LXM0-7eOLVXpYrVeUoOMZN53YQl3B55Z2UCLe4U6WGaE1s7zPKbDIqBXZRZejmQ8S1UKa~V7vzwU9CmFEvsim5DgtB0fYFIXyrfhQsCh4TEsjGOmYKBmx2VTBTl0PkbHI4uOVK70_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1483187044&Signature=TKA5DdOP3xIP~5PdK6Ausehe7fxGf7gQ6nEWd37bSeGGUPHfeINWPczPxM7NZAfqlnqS39cGsH4YFai1kJ-eCd--7k-nLI4KDR6czhADdAXwjV57ImzJS1A03oeNqWdKN9R3QL3nV6jaxeN0ImZgcoRViUjtmPYK-ACb~ZVdHT4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_en&type=PROGRAM&Expires=1477417578&Signature=cZOJrC5n6p5dtq5~QGEd5NDwnLFD144BgKKmvBO7zXC52p5S8luSwwi4enGI13wD4RVJiD6ZeSmDByzhYx50sCeDuTjYsU-X7CntofkJVQxPHjzINkmTqWZHTpHWnbwdj1sTh2tQooGHKkBtPGa2-9ND4NPMiTWJ3xv14qDMH8Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1483331268&Signature=V~crri6xh1Bs9NjujHCe13xsrjg3uyaGsQ99PV0LeBRY6KWd0P4f4FyoKPBo-GPQxJqWQwu~cPzIgKgrzslRu0f6Q3pc5S2W8VpkdQ0PFQDI5ayiGJFDHlTUbazW1bKYEsgKvsiWfpaGZjDPfqTrZ7np2Pn2ysDrZi0kBW~kvRE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_en&type=PROGRAM&Expires=1445407266&Signature=H--FhoLZ6cAiohHVhZEcrfHD6PNNxJd41rxqTG51HuJj6bKF8EuoIlVZr7YcKq5H3LgKPGpi6bmeKa6RrFYN9Z6CPLd6tY5h8aFI4LT9~dJsiVAHJQewEKH-TSBFnfj-K24MNc6D5hipXGcL7oKpC9Ndo-4uLD2QB1FlW-SqRB4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_en&type=PROGRAM&Expires=1478767459&Signature=Q7Bbmr0u3EYQnkcQR068sP1pvewzLY3H-7nYIqE1x0BSIZbfCFt1IFLg-vlojpLNpdxX60U8SqyCMHMiWvuU9QX2V7VDv2WA8angPNiXWdU5L03j4CdZlTfF17JKEX51zKBme1qPACTcDsoVi5i9ChIuxAhGuG8gY1QGfQPT9bk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1481263505&Signature=Htl4B79Emx5vJRKkVbpzfYaEznseywIlyRaKKRuKaN3~UmFWjyp2SV-ZIv5juhljZoF-XCT8lNy1n~df8EWrzUaBPXeuAy64O4jiA3L9KRauJSQAUvCrh6ioFpX41RTfFxWV5DiDmUOieb9EBoe-sfkILaagUg-VS30ssX1XtF0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_en&type=PROGRAM&Expires=1473995548&Signature=N8tY2TEwiz~fqoQBi0kCNnvHjseDJpXHFDwRgOkrOJ1SO9uCjS8oX72V1F2rigutO2qLduyuKNbwuyBrlYP4TUOJ28uPWVpb3bnFdyRVvhf4DKQSXNPkGOTR0knYiVQfiBFgdTXIrLo6xpgXny2KUwwdppIVvjK6wM~KOz4xO8c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_en&type=PROGRAM&Expires=1474141552&Signature=BkHAJ6stcyK3JblUtFoHzM9-7Ao0ZGz9icjbIBZU7EZJ4io3Uh4RknotH2qct7n0GqihdXnd724puY0KaG1dSrZ7jLeUOdXvUNyExh4TNJt862XELL-ECKmH6NOgJBxzKOJTb-MCLp6AZPkjyRnCOBAAKKC4TRjdC9ZJC4Ap1rw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1476597127&Signature=abfhlsT4AvFuZp4xITYkQIdl5pNhcZeD85HjxCA-FqqE0HSupVUlVad0cLDuolhm5~E9mN9VLaYbdGQYZ-QJzX9HEQTHjqSHiinskYiH-wsW1qCDYxgmyBBwWfd4egXDNzDOsrD3G9eq6n-tPm8wLiBQ0tE6glP7sJnxeXSRbGk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_es&type=PROGRAM&Expires=1476932964&Signature=BjBjD5o~iPlk3HUkwwfHY9h9jKbTlLe-IwzdgS4pH02TpnhwpVqdJtFlkb16UqK-dKS8rgVEFinb7sBTcn1el81HMPOe5lonKCeytF9mWW6Mkz4UF4JOAQMg~uZeix-b~QramKpCGfLQ6rXNDEIh-Lk~ySXqlYJ9VAaMt5kzlx8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_br&type=PROGRAM&Expires=1473160644&Signature=Cq0cVvACp0Lif3MPsW~HyThNARTBjdaQxvj9-zpHncwRrotuUhSshWbkaMfAP8qSDU6eRwWXlDv6ykT9indGJ-sXTS0XS9cGYTkakuOgddJnOVbcGbreLBAxu~~ORNu3gi8qBhXUB9e5tNuB0uQckponY2jSHEL0OYq9JlnqNdE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1478609973&Signature=Eh-9CcJJrUsBi5enDtDO9Kb~zUh6TyB3L5lA7oyFnIdU3MEDOGjYpKrApT-Si-IDQ25mqO9D3bHhHGrtMLPcQqvQcq22oq~RIUX-FvCFKGUEpgWzUCHYdI1pWnHi9IJ7O1B7mGdxEUSW1W7hjucjGmzYikpJyytdE2hXDVTIREg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

https://repair-my-word.softonic.com.br/download-tracker?th=1/.../2nenNc5lmq9qe6bB IOc9Otcf7htqSmqAaeiELLHTd8NaohYK9uBmxynsfc=

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1450059014&Signature=UI-m~0BzfYsZk3m6YPxwV0bQs4vgRyFDRc6CHGcW4PrXhuL13NnFwRfVKcgR2Nucnj51xCZrou6X8frzzwZ5wsJlngAS5XZ1jfLBtaEoEDtHk7EpqL9j5GALPXV0-xTLwkoha-Dp~36YSpQG0MM5pmf95koqyCOL-tnOkzsKTqk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://download.srv-eu02.getdata.com/WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1479781727&Signature=BBPQ~iTdeAKUdWY5dcjOg46dUr4c4SopzfBHgPbv6u7KEvUQGH27J5pcTiAxlbyrfWhvUlSLEauLH37l3wvmXZunwgLf-3v2VNZ4PQVdOKCd7raF8gej2iEBob0sdIKBqPdd0NTjS3QOw1nqU4GqV368VcDoReRu-dQNfhm2R14_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

https://dw.uptodown.com/dwn/3SGy1XRVDiu2oIrhJA6UuwiAfomjmOXpP4CNLf-umTEvygMUxy8m4bizzJ28Zd72FPtI9G8JERqGUCaL5YQRdO9ATryfxaPlueNbyBiPPvJZ35MyeMC5yvD34lnbkcXK/BoHBQOjA1-AujM8DfEbQ4y7Y0WX1z_Er_C3TB44ih1KbtfQZ_Vudq235P5DHkKMEd68CWrYfh2FeWiFEEDbo18M3DSAkZ1ajGpIbMUR6NMIszw7AGVH3eFSNnrNAlMVg/PY9NSyt60cDiMPEFq9bRzKYGfxBbHk8hXYsGfsIOWlzMlAgnhVIUEjJ3XQknZHDMynSqD0J36BgRNc_QRwsP3IBcGzqccvXk7SLOBwadHZuVv5ToNlQEZlK5PfgOqQyr/.../

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1440544191&Signature=icsxetNx1M~ykuSDnGzTDjgTzghrgrI8QwvP8L1Qy9BO6dVEKLDPg-QWuHPYl811ZpGkiQPZLs8W1~IxIBqeyv0ZPgIL-lNiisdnaf549lgBiZZJkF~nWSd5lkqQiQBqSGVQXXYwZwwT8yEKJMhLzldKn-cFIhe0RCnfnFxZ1s8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://cyberdados.com/download/.../

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1479438748&Signature=IlxM58z4osfEroTAVqFIhDkZUBW2y5f0BhQmmmazV-fKhs0c2XtIOkkA8hOoQSqs6cUp5tdA7bjXKET6uvgN56K3u1656OaRUCG6kOj48jC5H5D3fnfe5fy3rmpaKXzf1g0wVwkHhwiPYX2H0KZE1uy41Tc3FjKdvG-IQVMfa4c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1476134180&Signature=EUkefy6ZgerrW3llaDBFicMe5Rsi6kDP8o1X~mj6jufluu8gUhKxcocOD~rTwb~SGaW5Q1hoA7QGY8ejGCvpoakUzPY-yAAKqcpvXBd~kBQsyuxbHcADldYf4gJtDA73F~MExTVjexcuco~5pfR7VKYsONEt4f18yyoR2u5ZGxE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

temp:WordRepair.exe

http://www.downloadcrew.com/?act=software.download&id=28099&t=1474735371&c=930ca8bf327c5bcb7e82b1d329d93ececee38d24

http://gsf-cf.softonic.com/d23/281/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70664&instance=softonic_fr&type=PROGRAM&Expires=1472755324&Signature=fFS3HWEHlpr-9LRgf~7kXWfu0n4h103Oi9~Or7S85O2zDcjKXrf9cW~sF9sFX1lCVxPCq08UqbZbrUwyiwG7A7ebQGamsvHSa0CIYUPRXFK0UZMPeReBKlqAmxYHEVao3zkWFCOIGWyEd9eyfUpZIb46W1UpB~s1fsY09FKG15o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WordRepair.exe

Latest 30 of 48 download URLs

Scan wordrepair.exe - Powered by Reason Core Security