home

regorganizer.exe

Reg Organizer

Konstantin Polyakov

Publisher:
ChemTable Software  (signed by Konstantin Polyakov)

Product:
Reg Organizer

Version:
5.0.0.0

MD5:
ebb9c572641bf1c30754ac31399aa4c2

SHA-1:
17d4acae1a988586debe1fa6bb107f54e0be95ad

SHA-256:
2f1107eb0206c5a6545acccab262b617021257d66a28a6545fd3f5b177654f9e

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/18/2024 12:41:55 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.ASPack212
0.98/171

F-Prot
W32/Heuristic-210
v6.4.5.1.85

Trend Micro House Call
WORM_BAGLE.BMH
7.2.317

File size:
2.7 MB (2,876,608 bytes)

Product version:
5.0

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\reg organizer\regorganizer.exe

Digital Signature
Signed by:
Konstantin Polyakov

Authority:
The USERTRUST Network

Valid from:
6/23/2009 4:00:00 AM

Valid to:
6/24/2010 3:59:59 AM

Subject:
CN=Konstantin Polyakov, O=Konstantin Polyakov, STREET="Mira str., 36-18", L=Ekaterinburg, S=N/A, PostalCode=620078, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00975D70435BCFE7E20AC00DD74BA0CB32

File PE Metadata
Compilation timestamp:
12/17/2009 1:43:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:stQhHVNY1JX3Lay0Wn5qbE9BDZSE/fUMBFHAD6sXVx/MxO97pmDM2M1bC+fH/gFe:dhHoHXPBn5qQDDVjBNBsX/MyP4F6SKHV

Entry address:
0x1000

Entry point:
68, 01, F0, 9D, 00, E8, 01, 00, 00, 00, C3, C3, B9, 7B, AF, 52, 37, E3, 26, 93, C9, 60, 31, EA, 33, 6C, 2F, 52, F6, 45, AA, 57, 38, 7F, 3E, A0, 43, 58, 0C, A7, D5, 84, 27, A3, AB, 06, 35, 69, F3, 57, C2, 5C, C0, 4C, FF, C3, 23, 57, FE, 73, 76, 6F, C5, 34, F0, F7, 9B, 2F, BC, 50, 3A, A1, FE, F7, C9, A9, 86, DA, 11, 12, B0, 16, 9D, A6, A8, EA, 82, 97, CC, 14, 8A, 5F, 3C, E0, 79, 5F, C5, F7, D9, 61, 5C, 41, 7A, 06, 50, B3, 92, C7, 7A, 03, D2, E8, 97, BE, 01, 04, D3, 6E, 27, 66, CE, 8B, 9D, 6C, 0D, 46, 07, 0A...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
3.4 MB (3,530,752 bytes)

Scan regorganizer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.