RegistryTool.EXE
RegistryTool Application
Pc Utility Inc.
The application RegistryTool.EXE by Pc Utility has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is typically installed with the program RegistryTool by PC Utility, Inc. which is a potentially unwanted software program.
File name:
RegistryTool.EXE
Publisher:
PC Utility, Inc. (signed by Pc Utility Inc. )
Product:
RegistryTool Application
MD5:
20b62cd188af48e9d5dc6ba3b99f62a4
SHA-1:
6db8950a8464193784d116cac1f896754cc9f46a
SHA-256:
2147d1baf9af62a04982864e6fc1b0dfe25a9f8c6dfc39f13814460b52f71e06
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
4/25/2024 9:06:31 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
Win32.Generic
16.9.8.17
File size:
36.6 MB (38,409,544 bytes)
Copyright:
Copyright ©2011 PC Utility, Inc.. All rights reserved.
Original file name:
RegistryTool.EXE
File type:
Executable application (Win32 EXE)
Language:
English (United States)
Common path:
C:\Program Files\registrytool\registrytool.exe
Valid from:
9/21/2010 8:00:00 PM
Valid to:
11/13/2011 6:59:59 PM
Subject:
CN="Pc Utility Inc. ", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Pc Utility Inc. ", L=Ocean Springs, S=Mississippi, C=US
Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Serial number:
3AD20CDDB887F15DA2951F79198F8DF7
Compilation timestamp:
4/8/2011 3:37:22 PM
CTPH (ssdeep):
98304:Xn4a3DtL3Rcr8FTCiT/qOSZKdAH2tLOd4iuyzN31h3aaEMg5iX:3nhLirq/fSZK1t84iuo5aaEMRX
Code size:
2.3 MB (2,449,408 bytes)
Scheduled Task
Task name:
RegistryTool Startup
Trigger:
Logon (Runs on logon)
Description:
Runs RegistryTool at system startup.
The file RegistryTool.EXE has been discovered within the following program.
This is a 'registry cleaner' that is supposed to clean or fix a PC by removing invalid registry settings.
62% remove it
Powered by Should I Remove It?