home

regsetup.exe

NLB

Publisher:
NLB  (signed and verified)

MD5:
1867a3c00bae4b6fc6d6873cbc8619f2

SHA-1:
d862da99527bd33809005a0ca9c7caa5e9116500

SHA-256:
7fbda3cf6c281578ec29a0c8b3bc4c05cbcaa5a9cb222f521fc78a01f0022aa9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 8:42:15 PM UTC  (today)

File size:
27.3 KB (27,992 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\whereisit\regsetup.exe

Digital Signature
Signed by:
NLB

Authority:
ACNLB

Valid from:
12/23/2009 10:40:03 PM

Valid to:
12/23/2014 11:10:03 PM

Subject:
SERIALNUMBER=1887490800 + CN=Robert Galle, OU=Fizicne osebe, O=NLB, O=ACNLB, C=SI

Issuer:
O=ACNLB, C=SI

Serial number:
3ED15C18

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
768:oV13qxEQLMab3dBjONz3WM5Y7zSrHvLbLzlq:ov3qxEARUz35Y7GfVq

Entry address:
0x4EB8

Entry point:
55, 8B, EC, 83, C4, E0, 53, 56, 33, C0, 89, 45, E8, 89, 45, F0, B8, 48, 4E, 40, 00, E8, B6, F2, FF, FF, 33, C0, 55, 68, BF, 50, 40, 00, 64, FF, 30, 64, 89, 20, B8, F8, 74, 40, 00, E8, 56, DF, FF, FF, 8D, 4D, F0, BA, 00, 75, 40, 00, 66, B8, 02, 00, E8, 55, F6, FF, FF, 8B, 55, F0, B8, FC, 74, 40, 00, E8, 8C, DF, FF, FF, 83, 3D, FC, 74, 40, 00, 00, 76, 75, 68, D8, 50, 40, 00, FF, 35, 00, 75, 40, 00, 68, F0, 50, 40, 00, FF, 35, FC, 74, 40, 00, 68, 04, 51, 40, 00, B8, F8, 74, 40, 00, BA, 05, 00, 00, 00, E8, 25...
 
[+]

Entropy:
6.4566

Developed / compiled with:
Microsoft Visual C++

Code size:
17 KB (17,408 bytes)

The file regsetup.exe has been discovered within the following programs.

WhereIsIt? 2013  by Robert Galle
Publisher's description - “WhereIsIt supports Unicode encodings on all Unicode-capable Windows operating systems. Unicode allows you to represent and edit text in multiple languages and world writing systems side by side.”
www.whereisit-soft.com
About 2% of users remove it
WhereIsIt? 2014  by Robert Galle
Publisher's description - “WhereIsIt can catalog any disk or media type Windows can access by a drive letter or UNC address, including diskettes, hard disks, CD-ROMs, DVDs, USB drives, removable disks like iomega Zip and Jaz, external drives, network file servers etc.”
About 4% of users remove it
 
Powered by Should I Remove It?

Scan regsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.