home

RegUseUpdater.exe

RegUseUpdater

Honlyn (Macao Commercial Offshore) Limited

The application RegUseUpdater.exe by Honlyn (Macao Commercial Offshore) Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program RegUse by Honlyn Limited.
Publisher:
Honlyn (Macao Commercial Offshore) Limited  (signed and verified)

Product:
RegUseUpdater

Version:
1, 0, 0, 8

MD5:
e009ba66e232aba84094ac7ea8d33d15

SHA-1:
6fa6e7e897847e06d0c9ea5a4088dc44a0cdea46

SHA-256:
26e5a3205d81e694d68b7ff5efc655cd650f8a0d5345fd3500ccf58f26f264b6

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 2:03:46 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.1.30.12

File size:
85.4 KB (87,448 bytes)

Product version:
1, 0, 0, 8

Copyright:
Honlyn (Macao Commercial Offshore) Limited

Original file name:
RegUseUpdater.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\reguse\reguseupdater.exe

Digital Signature
Signed by:
Honlyn (Macao Commercial Offshore) Limited

Authority:
VeriSign, Inc.

Valid from:
7/10/2010 8:00:00 PM

Valid to:
7/24/2012 7:59:59 PM

Subject:
CN=Honlyn (Macao Commercial Offshore) Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Honlyn (Macao Commercial Offshore) Limited, L=Macau, S=Macau, C=MO

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
51646B013CA26E06A37C5AB790DF1B60

File PE Metadata
Compilation timestamp:
3/29/2010 3:12:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1536:j6n3i8FP16waucRqRpBkZt/DZVDuoxhMew7B0EaoCA:H8PrcaiLZVD7hMX7uFc

Entry address:
0xA640

Entry point:
6A, 74, 68, 60, EE, 40, 00, E8, 64, 03, 00, 00, 33, FF, 89, 7D, E0, 57, 8B, 1D, B0, C0, 40, 00, FF, D3, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 7D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, B9, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, B9, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 7D, FC, 6A, 02, FF, 15, 10, C3, 40, 00, 59, 83, 0D, 48, 12, 41, 00, FF, 83...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
44 KB (45,056 bytes)

The file RegUseUpdater.exe has been discovered within the following program.

RegUse  by Honlyn Limited
Publisher's description - “Make it Quick. Make it Easy. Scan The Registry, Correct The Errors, and Pump Up The System Speed. Registry faults cause your computer to run slower. Registry faults generate Windows error messages.Energize screen displays. Stop wading through Windows popup error messages.”
reguse.com
35% remove it
 
Powered by Should I Remove It?

Remove RegUseUpdater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.