» regorganizer.exe
Overview
Analysis
File Details

regorganizer.exe

Reg Organizer

Konstantin Polyakov

File name:

regorganizer.exe

Publisher:

ChemTable Software (signed by Konstantin Polyakov)

Product:

Reg Organizer

Version:

5.40.0.0

MD5:

303465ff7823245e5d0427907246513d

SHA-1:

2de992f4738fc9e43f7a621841dcd5fe235cb4dc

SHA-256:

9e1cc31b77fcfe2c0d95162af23b749c3560b62dfc9e00186c095dbf93f6e91a

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/20/2024 3:10:05 AM UTC (today)

Scan engine

Detection

Engine version

AegisLab AV Signature

Troj.W32.Gen

2.1.4+

AVG

RegOrganizer.A

2017.0.2847

File size:

3.4 MB (3,579,648 bytes)

Product version:

5.40 beta 1

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\reg organizer\regorganizer.exe

Digital Signature

Signed by:

Konstantin Polyakov

Authority:

The USERTRUST Network

Valid from:

6/21/2010 3:00:00 AM

Valid to:

6/21/2012 2:59:59 AM

Subject:

CN=Konstantin Polyakov, O=Konstantin Polyakov, STREET="Behtereva Str.,3-65", L=Ekaterinburg, S=N/A, PostalCode=620137, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

18148592B16C7BAA183584A9A875C576

File PE Metadata

Compilation timestamp:

12/28/2011 4:25:43 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

49152:v62Ko6qjmbljso2bXKXS+7VoMyM/MTYJla6FDKVTR+YbXc5:y2KVqjssoUXOSIMTGa6QVdz

Entry address:

0x1000

Entry point:

68, 01, E0, B7, 00, E8, 01, 00, 00, 00, C3, C3, 56, 77, 60, 5B, 77, 45, 0A, 3D, EA, 2C, BE, F8, E4, D1, FD, 11, C5, A4, 33, 79, E7, D4, 58, A5, 29, 23, EB, EB, DD, CC, 5B, 8C, F4, C4, 8B, 32, EB, FF, AE, 9B, 05, 5D, D8, D1, 79, 1D, 90, 63, FD, 30, E6, 56, 14, 16, 97, 01, 15, CE, 4F, DD, 38, 8D, 20, CD, D0, 38, 64, 88, 72, BD, 90, 06, 75, CC, C5, E5, 23, 86, 3E, 06, 80, 43, 17, 60, A5, 06, BA, DF, B6, 66, 1C, 6C, AD, 7D, 21, 4E, 59, 6F, 36, 2D, B8, A6, 86, D6, 02, 1E, 48, CD, 92, 96, 82, C0, F7, 02, 61, C4... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

4.6 MB (4,849,664 bytes)

Scan regorganizer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.