» RegUnregStub.exe
Overview
Analysis
File Details

RegUnregStub.exe

Perfgraph

Marton Anka

File name:

RegUnregStub.exe

Publisher:

CodeFromThe70s.org (signed by Marton Anka)

Product:

Perfgraph

Description:

Perfgraph RegUnregStub

Version:

3, 0, 13, 21

MD5:

2516b85fc415abffef206159ad7d9b14

SHA-1:

c6fd819f3bfc9b4846e434470ee6c62bb7c71e86

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/19/2024 6:51:12 AM UTC (today)

Scan engine

Detection

Engine version

Quick Heal

Trojan.Agent.IRC

9.14.11.00

File size:

55.2 KB (56,488 bytes)

Product version:

3, 0, 13, 21

Original file name:

RegUnregStub.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\codefromthe70s.org\perfgraph\regunregstub.exe

Digital Signature

Signed by:

Marton Anka

Authority:

The USERTRUST Network

Valid from:

5/6/2008 10:00:00 AM

Valid to:

5/7/2009 9:59:59 AM

Subject:

CN=Marton Anka, O=Marton Anka, STREET=9 Woodvue Road, L=Windham, S=NH, PostalCode=03087, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

20C87D26B8DC92F9621D0311DB25831A

File PE Metadata

Compilation timestamp:

11/8/2008 2:19:15 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

768:XXLARldu+SLUkqrNPWnn3gve9iijEC+ggocea6VSF47TnoqcLv4CLhTmw:nLLLBqrIQlPXg9BToqcLv4CFTmw

Entry address:

0x1660

Entry point:

E8, 67, 17, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 78, AD, 40, 00, 89, 0D, 74, AD, 40, 00, 89, 15, 70, AD, 40, 00, 89, 1D, 6C, AD, 40, 00, 89, 35, 68, AD, 40, 00, 89, 3D, 64, AD, 40, 00, 66, 8C, 15, 90, AD, 40, 00, 66, 8C, 0D, 84, AD, 40, 00, 66, 8C, 1D, 60, AD, 40, 00, 66, 8C, 05, 5C, AD, 40, 00, 66, 8C, 25, 58, AD, 40, 00, 66, 8C, 2D, 54, AD, 40, 00, 9C, 8F, 05, 88, AD, 40, 00, 8B, 45, 00, A3, 7C, AD, 40, 00, 8B, 45, 04, A3, 80, AD, 40, 00, 8D, 45, 08, A3, 8C, AD, 40... 
[+]

Entropy:

6.1945

Code size:

25.5 KB (26,112 bytes)

Scan RegUnregStub.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.