» reg1aid.exe
Overview
Analysis
File Details
Programs (1)

reg1aid.exe

Registry First Aid

Rose City Software

File name:

reg1aid.exe

Publisher:

KsL Software (signed by Rose City Software)

Product:

Registry First Aid

Description:

Registry First Aid, the easy powerful registry cleanup program

Version:

6.1.0.1549

MD5:

0ca7a643264ea00f59208ceec1c34ba8

SHA-1:

27bfc933eff428d3cc70e0b9228a3af217b182eb

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 10:55:45 PM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/17211

File size:

1.4 MB (1,428,304 bytes)

Product version:

6.1.0.1549

Original file name:

reg1aid.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\rfa\reg1aid.exe

Digital Signature

Signed by:

Rose City Software

Authority:

GeoTrust Inc.

Valid from:

1/28/2007 6:32:52 PM

Valid to:

2/11/2008 6:32:52 PM

Subject:

E=sales@infinisource.com, CN=Rose City Software, OU=Email and phone validated only., OU=Phone Validation - 1(503) 699-4096, OU=See Public S/MIME CPS www.geotrust.com/resources/CPS., OU=CPS terms incorporated by reference liability limited.

Issuer:

CN=GeoTrust True Credentials CA 2, O=GeoTrust Inc., C=US

Serial number:

1062CD

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:Zu05s0+y7Yl/IZ2567MMCbMMGMRMM08MMBO6CMMdMMKGMMDM0oMM2MMrMFhMMGMK:IXy0x4gMCbMMGMRMM08MMBO6CMMdMMK2

Entry address:

0x1000

Entry point:

68, 01, C0, 61, 00, E8, 01, 00, 00, 00, C3, C3, 52, 9B, A2, 90, B1, C7, C1, A2, 5E, 31, 89, E9, 6B, A9, 11, 2E, 2A, 27, 8F, 76, DB, B2, AC, FD, 77, C1, 3D, D7, 9A, 63, FF, E9, 8C, 8A, DE, D5, 12, C6, 7E, 76, 56, 4A, 8E, 64, 2E, 68, 05, 80, AB, 8C, 6B, 33, 10, 5A, 5A, 03, D0, D4, C3, 2E, 2D, 5A, 0B, 57, 7B, 3A, 8F, 97, D2, F5, C8, E5, 78, 3F, FF, 1C, 09, 2B, 94, BC, 01, C7, 48, 9C, 02, 7F, 50, CF, 5D, 63, 1D, AE, C6, 99, 7A, C4, 9F, E4, 47, AE, BF, 72, 5B, 48, 90, 8A, DD, 1D, AE, B2, 26, 40, 2A, 06, 12, 7F... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

860 KB (880,640 bytes)

The file reg1aid.exe has been discovered within the following program.

Registry First Aid by RoseCitySoftware

Registry First Aid from RoseCitySoftware is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.

www.registry-repair-software.com

47% remove it

Scan reg1aid.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.