home

regorganizer.exe

Reg Organizer

Konstantin Polyakov

Publisher:
ChemTable Software  (signed by Konstantin Polyakov)

Product:
Reg Organizer

Version:
5.0.0.0

MD5:
0aa2b30fc988148388ac47aa15ea3831

SHA-1:
2ffe27f11be6340a00cf9602704f1ff8bdfc13da

SHA-256:
db50564099913c243176c3449f462478842bbc6c44630b85ea3d36fa92f6a292

Scanner detections:
8 / 68

Status:
Clean  (8 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/24/2024 9:32:52 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.ASPack
0.98/18155

F-Prot
W32/Heuristic-210
v6.4.5.1.85

Trend Micro House Call
WORM_BAGLE.BMH
7.2.93

File size:
2.8 MB (2,915,520 bytes)

Product version:
5.0

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\reg organizer\regorganizer.exe

Digital Signature
Signed by:
Konstantin Polyakov

Authority:
The USERTRUST Network

Valid from:
6/23/2009 4:00:00 AM

Valid to:
6/24/2010 3:59:59 AM

Subject:
CN=Konstantin Polyakov, O=Konstantin Polyakov, STREET="Mira str., 36-18", L=Ekaterinburg, S=N/A, PostalCode=620078, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00975D70435BCFE7E20AC00DD74BA0CB32

File PE Metadata
Compilation timestamp:
2/18/2010 12:22:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
49152:oGWKCqD5dxgiJmmRNA4itUMRI/Mx/4F6VKkmlp:xHHD5rgiMmRNfERaMt4F64kmf

Entry address:
0x1000

Entry point:
68, 01, 00, 9E, 00, E8, 01, 00, 00, 00, C3, C3, D0, 6B, F0, A1, 55, F8, 5E, 57, B4, B4, E8, 93, 27, 13, AA, DF, D9, 55, AA, F1, 38, DE, A8, B7, DD, B9, 29, 40, D9, F9, 05, 7D, 7C, CF, 09, 49, D0, C4, 2C, A0, 50, 5A, 7C, 32, A1, AD, 04, A2, 89, 17, 49, 5B, 40, 5D, DE, 89, D9, AA, 7E, 2D, 32, 80, F9, 51, BA, 51, B4, ED, 28, 0C, BE, D4, 9F, 20, 99, 31, 09, D2, D8, C3, 42, 27, BD, CE, D5, 6F, 06, 6F, E5, 67, E4, 6E, AF, 64, 50, AE, 4A, 89, 4F, B5, F8, 76, 11, 79, 95, 19, FA, 18, B2, 2E, A1, 17, AA, 5B, C9, B4...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
3.4 MB (3,534,848 bytes)

Scan regorganizer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.