home

comreg.exe

VMware, Inc.

This is installed with VMware Tools.
Publisher:
VMware, Inc.  (signed and verified)

MD5:
0403f9a44466db9c89605962e6fc78e3

SHA-1:
949a9c559ecd5f30867bf6c0c72219bd4da56f3a

SHA-256:
9c7e35588151f8583efeae43889c0beffdeb4306b90edde9d2dac0056cc34bc4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:31:37 AM UTC  (today)

File size:
98.5 KB (100,912 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\vmware\vmware tools\comreg.exe

Digital Signature
Signed by:
VMware, Inc.

Authority:
VeriSign, Inc.

Valid from:
9/11/2007 3:00:00 AM

Valid to:
10/30/2010 2:59:59 AM

Subject:
CN="VMware, Inc.", OU=Marketing, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="VMware, Inc.", L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
72FB3194DF6A92475219F34B6F008993

File PE Metadata
Compilation timestamp:
9/21/2010 10:10:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:w7RQBDndbX3zi6OKyP5Ff8MY1vuq11G48BLy3GXYxKTUtmPeTw15tTzouo:w2hbzi6OjPc9G0HLW5t4

Entry address:
0x362E

Entry point:
E8, 0A, 21, 00, 00, E9, 41, FE, FF, FF, E9, 45, 00, 00, 00, 51, C7, 01, 70, 1B, 41, 00, E8, 88, 21, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, D8, FF, FF, FF, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, D8, 21, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 6A, 0C, 68, D0, 3F, 41, 00, E8, 56, 20, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, 9C, 7F, 41, 00, 03, 75, 43, 6A, 04, E8, 28, 24, 00, 00, 59, 83, 65, FC, 00, 56, E8, 96, 24...
 
[+]

Code size:
64 KB (65,536 bytes)

The file comreg.exe has been discovered within the following program.

VMware Tools  by VMware, Inc.
The VMware Tools package adds drivers and utilities to improve the graphical performance, including mouse tracking, for different guest operating systems.
www.vmware.com
5% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.