home

RegistryEditForAddin.exe

RegistryEditForAddin

IDAutomation.com, Inc.

Publisher:
ida  (signed by IDAutomation.com, Inc.)

Product:
RegistryEditForAddin

Version:
1.00

MD5:
7aa25fe44912aaffe1c3da946be64693

SHA-1:
85fe2600ff90f49e2c5a7539f3dfc34a79e88180

SHA-256:
9d594dc5932f8751d070dede48c85ccf6de770afd6b738b7edf54ce6cae496f5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:25:04 PM UTC  (today)

File size:
29.3 KB (30,032 bytes)

Product version:
1.00

Original file name:
RegistryEditForAddin.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\idautomation.com word and excel add-in\registryeditforaddin.exe

Digital Signature
Signed by:
IDAutomation.com, Inc.

Authority:
VeriSign, Inc.

Valid from:
6/28/2007 1:00:00 AM

Valid to:
6/28/2010 12:59:59 AM

Subject:
CN="IDAutomation.com, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="IDAutomation.com, Inc.", L=Tampa, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
258CF4977817332983462284F56807BA

File PE Metadata
Compilation timestamp:
3/25/2010 3:49:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:VZRdGazq63MYmIMvCnQ6QBD9yzCw4vMF2oYJLWN2sLkbJ9U:VboazHMYB3nQHMzCw4vMF29LLbXU

Entry address:
0x1368

Entry point:
68, 98, 18, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, E0, 1D, BD, 18, 69, C7, 60, 49, A1, 0A, 1B, 37, 27, C9, 68, 1C, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 30, 32, 30, 34, 33, 30, 45, 64, 69, 74, 45, 78, 63, 65, 6C, 52, 65, 67, 69, 73, 74, 72, 79, 00, 30, 30, 30, 30, 30, 30, 00, 00, 00, 00, FF, CC, 31, 00, 01, F4, F2, A4, 50, 5C, C1, F1, 4F, 91, 71, 45, 00, 2D, 24, D3, B2, 38, 12, F0, EB, D8, BA, 0A, 4F, B0, 0D, AB, 6D, 1A, D0, A1, 14, 3A, 4F, AD...
 
[+]

Entropy:
4.2115

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
12 KB (12,288 bytes)

Scan RegistryEditForAddin.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.