Der reg organizer setup exe (Reg Organizer Setup) ChemTable Software Malware Analyse

Der reg-organizer-setup.exe (Reg Organizer Setup) Scan-Bericht

Aktualisiert 1 year ago

Geprüft von Malware Check

reg-organizer-setup.exe

Hash-Typ	Wert	Aktion
MD5	949a35be5b70a57d9c979b4743cd28b8
SHA1	234aeb56a6db432571a1db175d470552a8121b27
SHA256	709b3cab8012d265965a3e7a7b438312550e9ea16ea7611f81c3cfc065fd3c41
SHA512	e72c22d44d529e27e32356144ee4ec73ff5f8e64657da6405e018b5b8d0110df111aa0fe1acea85f5ce867e6b606283757cc36658840144ae3b77f0d4fa51522
ImpHash	5a594319a0d69dbc452e748bcf05892e

Hash-Typ

Wert

Aktion

MD5

949a35be5b70a57d9c979b4743cd28b8

SHA1

234aeb56a6db432571a1db175d470552a8121b27

SHA256

709b3cab8012d265965a3e7a7b438312550e9ea16ea7611f81c3cfc065fd3c41

SHA512

e72c22d44d529e27e32356144ee4ec73ff5f8e64657da6405e018b5b8d0110df111aa0fe1acea85f5ce867e6b606283757cc36658840144ae3b77f0d4fa51522

ImpHash

5a594319a0d69dbc452e748bcf05892e

PE-Analyse

Grundlegende Informationen

▼

Symbol	Hash: a0ef7c81eee20e999575764306184ccf Unscharf: 8341e53a6f1047f3c936b4d36dc8f542 dHash: 5050d274ccec82ae
Bildbasis	`0x00400000`
Einstiegspunkt	`0x004b5eec`
Kompilierungszeit	2021-06-03 08:09:11
Prüfsumme	0x01a23c12 (Tatsächlich: 0x01a23c12)
OS-Version	6.1
PEiD-Signaturen	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digitale Signatur	OK
Importe	7 Bibliotheken kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
Exporte	3 Funktionen
Ressourcen	30 Ressourcen
Abschnitte	10 Abschnitte

Digitale Signaturen

▼

Sectigo RSA Code Signing CA	Konstantin Polyakov (RU)
AAA Certificate Services	The USERTRUST Network (US)
USERTrust RSA Certification Authority	Sectigo Limited (GB)
USERTrust RSA Certification Authority	Sectigo Limited (GB)
Sectigo RSA Time Stamping CA	Sectigo Limited (GB)

Versionsinformationen

▼

Comments	This installation was built with Inno Setup.
CompanyName	ChemTable Software
FileDescription	Reg Organizer Setup
FileVersion	9.31.0.0
LegalCopyright	Copyright © ChemTable Software
OriginalFileName
ProductName	Reg Organizer
ProductVersion	9.31
Translation	0x0000 0x04b0

PE-Abschnitte

▼

Name	Virtuelle Adresse	Virtuelle Größe	Rohgröße	Entropie	Eigenschaften	MD5
`.text`	`0x00001000`	734,748 bytes	735,232 bytes	6.36 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AD6E46E3A3ACDB533EB6A077F6D065AF`
`.itext`	`0x000b5000`	5,768 bytes	6,144 bytes	5.97 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D40FC822339D01F2ABCC5493AC101C94`
`.data`	`0x000b7000`	14,244 bytes	14,336 bytes	5.04 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`4C195D5591F6D61265DF08A3733DE3A2`
`.bss`	`0x000bb000`	28,136 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000c2000`	3,894 bytes	4,096 bytes	4.90 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A73D686F1E8B9BB06EC767721135E397`
`.didata`	`0x000c3000`	420 bytes	512 bytes	2.76 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`41B8CE23DD243D14BEEBC71771885C89`
`.edata`	`0x000c4000`	154 bytes	512 bytes	1.87 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`37C1A5C63717831863E018C0F51DABB7`
`.tls`	`0x000c5000`	24 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000c6000`	93 bytes	512 bytes	1.38 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8F2F090ACD9622C88A6A852E72F94E96`
`.rsrc`	`0x000c7000`	69,120 bytes	69,120 bytes	3.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7516A5731EA638574AFADE617085A683`

Ressourcenanalyse

▼

Gesamtressourcen: 30 (67,411 Bytes)

Ressourcentyp	Anzahl	Gesamtgröße	Prozentsatz
RT_ICON	13	55,173 Bytes	81.8%
RT_STRING	11	8,040 Bytes	11.9%
RT_RCDATA	3	768 Bytes	1.1%
RT_GROUP_ICON	1	188 Bytes	0.3%
RT_VERSION	1	1,412 Bytes	2.1%
RT_MANIFEST	1	1,830 Bytes	2.7%

Zertifikatsketten-Analyse

▼

Zertifikat #1

Betreff	Konstantin Polyakov Konstantin Polyakov RU
Aussteller	Sectigo RSA Code Signing CA
Seriennummer	`291527224788033781612269411320583171962`

Zertifikat #2

Betreff	USERTrust RSA Certification Authority The USERTRUST Network US
Aussteller	AAA Certificate Services
Seriennummer	`76359301477803385872276235234032301461`

Zertifikat #3

Betreff	Sectigo RSA Code Signing CA Sectigo Limited GB
Aussteller	USERTrust RSA Certification Authority
Seriennummer	`39390228139828865494873669055555031914`

Zertifikat #4

Betreff	Sectigo RSA Time Stamping CA Sectigo Limited GB
Aussteller	USERTrust RSA Certification Authority
Seriennummer	`63883093293784159655322269805543173561`

Zertifikat #5

Betreff	Sectigo RSA Time Stamping Signer #4 Sectigo Limited GB
Aussteller	Sectigo RSA Time Stamping CA
Seriennummer	`76161378635050837295056099126206603988`

Zertifikat-Verifizierungsstatus

Denken Sie daran: Dies ist das Ergebnis des Online-Virenscanners

Gridinsoft Anti-Malware verfügt über eine viel leistungsstärkere Virenscanning-Engine. Wir empfehlen, sie für eine genauere Diagnose infizierter Systeme zu verwenden. Diese kurze Anleitung hilft Ihnen bei der Installation unseres Flaggschiffprodukts für eine genauere Diagnose:

Anti-Malware herunterladen

Kommentar hinterlassen

Dateiname	reg-organizer-setup.exe
Dateityp	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner-Version	1.0.146.174
Datenbankversion	2023-11-06 11:00:50 UTC