home

Rescue.exe

RegRun Security Suite

Greatis Software, LLC

Publisher:
Greatis Software  (signed by Greatis Software, LLC)

Product:
RegRun Security Suite

Description:
RegRun Rescue

Version:
6.9.6.2009

MD5:
7c5da4a71e78ea5e00a82ba0af0c5adb

SHA-1:
dc17c83ccb0c13e00e5cb9ab57499c2f160b31a1

SHA-256:
7d07ffe3260e102181cc6f4de64abed01d03ef0fa5dd3a072bbb09c186ddfd7c

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/25/2024 8:37:57 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.ASPack
0.98/17211

Quick Heal
(Suspicious) - DNAScan
11.15.11.00

File size:
964.8 KB (987,928 bytes)

Product version:
6.9

Copyright:
Greatis Software (c)

Trademarks:
RegRun

Original file name:
Rescue.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\greatis\regrunsuite\rescue.exe

Digital Signature
Signed by:
Greatis Software, LLC

Authority:
The USERTRUST Network

Valid from:
6/3/2009 1:00:00 AM

Valid to:
6/4/2011 12:59:59 AM

Subject:
CN="Greatis Software, LLC", O="Greatis Software, LLC", STREET=Turgeneva 1-65, L=Yaroslavl, S=Yarosalvl, PostalCode=150054, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00A8D1B87F5FA913FEF96BA854DF246392

File PE Metadata
Compilation timestamp:
10/7/2010 4:50:04 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Cp7EpvU62myEkJG4GlVnTDBGegFbLp9VVI/:dyQkJ4nDBz6jVVI/

Entry address:
0x1000

Entry point:
68, 01, D0, 54, 00, E8, 01, 00, 00, 00, C3, C3, A6, 34, CF, FF, 6A, 80, BC, 8D, B4, 93, 88, 1D, 2B, 43, 01, 10, AD, D1, 6A, 52, A7, 60, 64, 59, 69, A0, 18, 56, 7A, B3, F3, BC, 7D, 43, 84, 20, 6A, 09, C9, A3, 58, 91, 69, 75, 56, EE, 4A, 0C, 60, 9C, 36, BD, B5, 08, 8F, FC, 65, A4, 06, 90, 50, 26, 70, BE, 73, 5B, 52, E2, 6F, F9, 2F, 4B, FE, 91, B3, 12, F9, BA, 5F, C9, 98, 92, D9, D0, 55, 1E, 63, C7, 85, 5C, 2A, B6, 1F, 2D, B4, 7A, 69, 21, 3E, FF, 65, F3, 50, 0A, C6, DF, FD, A0, 0C, B9, 0C, 3C, 86, 53, C8, D2...
 
[+]

Entropy:
7.5550

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
800 KB (819,200 bytes)

Scan Rescue.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.