» regorganizer.exe
Overview
Analysis
File Details

regorganizer.exe

Reg Organizer

Konstantin Polyakov

File name:

regorganizer.exe

Publisher:

ChemTable Software (signed by Konstantin Polyakov)

Product:

Reg Organizer

Version:

5.0.0.0

MD5:

35cb041a90d8bd6b52c18ef14e3c1a96

SHA-1:

a368e23635f663b6b24d7fb891bad7bf888d24c7

SHA-256:

9c0ed4b2b60031c6d48062fe26b2bb4cfbdf2fc9939ac34a9d97fac260f16cc5

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/19/2024 5:49:40 PM UTC (today)

Scan engine

Detection

Engine version

F-Prot

W32/Heuristic-210

v6.4.5.1.85

Trend Micro House Call

WORM_BAGLE.BMH

7.2.152

File size:

2.8 MB (2,913,984 bytes)

Product version:

5.0

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\reg organizer\regorganizer.exe

Digital Signature

Signed by:

Konstantin Polyakov

Authority:

The USERTRUST Network

Valid from:

6/23/2009 3:00:00 AM

Valid to:

6/24/2010 2:59:59 AM

Subject:

CN=Konstantin Polyakov, O=Konstantin Polyakov, STREET="Mira str., 36-18", L=Ekaterinburg, S=N/A, PostalCode=620078, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00975D70435BCFE7E20AC00DD74BA0CB32

File PE Metadata

Compilation timestamp:

2/17/2010 3:38:03 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

49152:TBaLuhgYC7nl4YoidSki5ggJONMI/Mx24F6VKpSD:QuhgYU7grbOyaM44F64pY

Entry address:

0x1000

Entry point:

68, 01, 00, 9E, 00, E8, 01, 00, 00, 00, C3, C3, 2D, 84, FB, CF, 3C, B9, DF, 90, EA, BA, 4E, 50, B0, F2, 30, 7A, 9E, 50, AB, 1D, 0A, 7B, DA, 88, 1F, 1F, 9C, 10, 8A, 18, 37, A4, BF, 85, F6, 76, 0B, B0, 67, 80, 60, 9D, 00, 28, 1C, 42, 42, F8, 1D, DA, 64, 5B, F7, C0, A6, EB, 2F, A5, 50, 00, F5, 19, E3, 12, CF, 91, 98, B0, 30, 98, FA, 3C, 5C, AD, 73, 77, 58, 3F, BB, 1D, 25, 9F, DE, 89, 29, 63, 79, 40, 7A, 1B, DC, D3, AF, 55, 38, 1E, 90, 67, 94, DA, 90, 1A, DC, 51, D0, 50, 79, D7, 74, 2B, 39, F3, 6F, CA, F6, 6D... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

3.4 MB (3,534,848 bytes)

Scan regorganizer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.