» registryvictor_setup.exe
Overview
Analysis
File Details

registryvictor_setup.exe

Registry Victor

ALIKET SOFTWARE CO., LTD.

The application registryvictor_setup.exe, “Registry Victor Setup ” by ALIKET SOFTWARE CO. has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer.

File name:

Publisher:

RegistryVictor.com (signed by ALIKET SOFTWARE CO., LTD.)

Product:

Registry Victor

Description:

Registry Victor Setup

Version:

5.2.5.7

MD5:

3609a9b6da58ad9b774bdbd4026acf89

SHA-1:

f482bc61e36f18afa25db18199d0c30acdb5f02c

SHA-256:

8713c981bd22e2be6d26bf2599eb72b646151d474a008e9ec0f9fda19aaed8b5

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/19/2024 3:08:51 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.ALIKETSOFTWARECO.Installer

16.2.14.4

File size:

2.4 MB (2,506,288 bytes)

Product version:

5.2.5.7

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Digital Signature

Signed by:

ALIKET SOFTWARE CO., LTD.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

11/27/2008 7:00:00 AM

Valid to:

11/28/2010 6:59:59 AM

Subject:

CN="ALIKET SOFTWARE CO., LTD.", OU=Secure Application Development, O="ALIKET SOFTWARE CO., LTD.", L=BEIJING, S=BEIJING, C=CN

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

6C4B7FCD34A45D21B17CD1FC8F8559A8

File PE Metadata

Compilation timestamp:

6/20/1992 5:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:eBwCQXCI8cq16QqlDJFg36n5NeB2wDz6+Gbl03Z43H1Syp1cD/:eBwCQXCyaqTG6nfeB2wZGbKZ4X1Sy7cT

Entry address:

0x9A58

Entropy:

7.0923

Code size:

36.5 KB (37,376 bytes)

Remove registryvictor_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.