» reg1aid.exe
Overview
Analysis
File Details
Programs (2)

reg1aid.exe

Registry First Aid

Rose City Software

File name:

reg1aid.exe

Publisher:

KsL Software (signed by Rose City Software)

Product:

Registry First Aid

Description:

Registry First Aid, the easy powerful registry cleanup program

Version:

6.1.0.1546

MD5:

8d8af0ec764f85507442f36a4ca9f8f2

SHA-1:

33be10917718369b9f64b94ef2fa4a49d527ed68

SHA-256:

c3ac2a4f560780410382ceace746adaafc9ca71733a0d46096990e8487bc2bea

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 3:40:24 AM UTC (today)

Scan engine

Detection

Engine version

Vba32 AntiVirus

suspected of Win32.BrokenEmbeddedSignature

15.01.07

File size:

1.4 MB (1,425,208 bytes)

Product version:

6.1.0.1546

Original file name:

reg1aid.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\rfa\reg1aid.exe

Digital Signature

Signed by:

Rose City Software

Authority:

GeoTrust Inc.

Valid from:

1/28/2007 5:32:52 PM

Valid to:

2/11/2008 5:32:52 PM

Subject:

E=sales@infinisource.com, CN=Rose City Software, OU=Email and phone validated only., OU=Phone Validation - 1(503) 699-4096, OU=See Public S/MIME CPS www.geotrust.com/resources/CPS., OU=CPS terms incorporated by reference liability limited.

Issuer:

CN=GeoTrust True Credentials CA 2, O=GeoTrust Inc., C=US

Serial number:

1062CD

File PE Metadata

Compilation timestamp:

6/19/1992 11:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:l4nZ/Df1hDrzUopyoftLSZ/Z2567MMCbMMGMRMM08MMBO6CMMdMMKGMMDM0oMM23:+hf1hDxhF4gMCbMMGMRMM08MMBO6CMMf

Entry address:

0x1000

Entry point:

68, 01, A0, 61, 00, E8, 01, 00, 00, 00, C3, C3, CF, 2C, 99, 62, 33, 6C, 81, A2, 46, 53, B0, 1D, 66, 3D, 12, 4D, 26, 3F, 2F, 8C, FB, B2, AC, FD, 77, C1, 3D, D7, DA, BD, 41, DB, 14, B5, C0, 04, 56, 48, CC, 08, 88, 39, 3A, 59, 76, C4, C3, 0E, 4C, FA, 5B, 30, 70, 57, 8D, A8, E1, 54, DE, 28, 1E, 15, D6, 61, D5, E5, 3B, 65, D6, 1D, 21, 74, E2, 9B, BA, 96, C8, 03, E1, 1B, 4C, E2, 26, 75, A0, 5C, 06, FE, 53, DD, 24, AC, A3, F0, FE, 08, 4A, 65, 49, E8, F9, 4C, 44, FF, 98, ED, D8, B7, 60, C9, DB, D4, 8D, 58, 4A, F5... 
[+]

Entropy:

6.4417

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

861.5 KB (882,176 bytes)

The file reg1aid.exe has been discovered within the following programs.

Registry First Aid by RoseCitySoftware

Registry First Aid from RoseCitySoftware is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.

www.registry-repair-software.com

47% remove it

Registry First Aid Platinum by RoseCitySoftware

This is registry utility whose purported purpose is to remove redundant items from the Windows registry. The software helps to automate the process of looking for invalid entries, missing file references or broken links within the registry and resolving or removing them.

shop.avanquest.com/de/prod.php?pid=1955

56% remove it

Scan reg1aid.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.