Rapport d'analyse du fichier reg organizer setup exe (Reg Organizer Setup) ChemTable Software

Rapport d'analyse de reg-organizer-setup.exe (Reg Organizer Setup)

Mis à jour 1 year ago

Vérifié par Malware Check

reg-organizer-setup.exe

Type de hachage	Valeur	Action
MD5	949a35be5b70a57d9c979b4743cd28b8
SHA1	234aeb56a6db432571a1db175d470552a8121b27
SHA256	709b3cab8012d265965a3e7a7b438312550e9ea16ea7611f81c3cfc065fd3c41
SHA512	e72c22d44d529e27e32356144ee4ec73ff5f8e64657da6405e018b5b8d0110df111aa0fe1acea85f5ce867e6b606283757cc36658840144ae3b77f0d4fa51522
ImpHash	5a594319a0d69dbc452e748bcf05892e

Type de hachage

Valeur

Action

MD5

949a35be5b70a57d9c979b4743cd28b8

SHA1

234aeb56a6db432571a1db175d470552a8121b27

SHA256

709b3cab8012d265965a3e7a7b438312550e9ea16ea7611f81c3cfc065fd3c41

SHA512

e72c22d44d529e27e32356144ee4ec73ff5f8e64657da6405e018b5b8d0110df111aa0fe1acea85f5ce867e6b606283757cc36658840144ae3b77f0d4fa51522

ImpHash

5a594319a0d69dbc452e748bcf05892e

Analyse PE

Informations de base

▼

Icône	Hachage: a0ef7c81eee20e999575764306184ccf Flou: 8341e53a6f1047f3c936b4d36dc8f542 dHash: 5050d274ccec82ae
Base d'image	`0x00400000`
Point d'entrée	`0x004b5eec`
Heure de compilation	2021-06-03 08:09:11
Somme de contrôle	0x01a23c12 (Réel: 0x01a23c12)
Version OS	6.1
Signatures PEiD	`PE32 executable (GUI) Intel 80386, for MS Windows`
Signature numérique	OK
Importations	7 bibliothèques kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
Exportations	3 fonctions
Ressources	30 Ressources
Sections	10 Sections

Signatures numériques

▼

Sectigo RSA Code Signing CA	Konstantin Polyakov (RU)
AAA Certificate Services	The USERTRUST Network (US)
USERTrust RSA Certification Authority	Sectigo Limited (GB)
USERTrust RSA Certification Authority	Sectigo Limited (GB)
Sectigo RSA Time Stamping CA	Sectigo Limited (GB)

Informations de version

▼

Comments	This installation was built with Inno Setup.
CompanyName	ChemTable Software
FileDescription	Reg Organizer Setup
FileVersion	9.31.0.0
LegalCopyright	Copyright © ChemTable Software
OriginalFileName
ProductName	Reg Organizer
ProductVersion	9.31
Translation	0x0000 0x04b0

Sections PE

▼

Nom	Adresse virtuelle	Taille virtuelle	Taille brute	Entropie	Caractéristiques	MD5
`.text`	`0x00001000`	734,748 bytes	735,232 bytes	6.36 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AD6E46E3A3ACDB533EB6A077F6D065AF`
`.itext`	`0x000b5000`	5,768 bytes	6,144 bytes	5.97 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D40FC822339D01F2ABCC5493AC101C94`
`.data`	`0x000b7000`	14,244 bytes	14,336 bytes	5.04 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`4C195D5591F6D61265DF08A3733DE3A2`
`.bss`	`0x000bb000`	28,136 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000c2000`	3,894 bytes	4,096 bytes	4.90 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A73D686F1E8B9BB06EC767721135E397`
`.didata`	`0x000c3000`	420 bytes	512 bytes	2.76 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`41B8CE23DD243D14BEEBC71771885C89`
`.edata`	`0x000c4000`	154 bytes	512 bytes	1.87 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`37C1A5C63717831863E018C0F51DABB7`
`.tls`	`0x000c5000`	24 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000c6000`	93 bytes	512 bytes	1.38 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8F2F090ACD9622C88A6A852E72F94E96`
`.rsrc`	`0x000c7000`	69,120 bytes	69,120 bytes	3.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7516A5731EA638574AFADE617085A683`

Analyse des ressources

▼

Total des ressources: 30 (67,411 octets)

Type de ressource	Nombre	Taille totale	Pourcentage
RT_ICON	13	55,173 octets	81.8%
RT_STRING	11	8,040 octets	11.9%
RT_RCDATA	3	768 octets	1.1%
RT_GROUP_ICON	1	188 octets	0.3%
RT_VERSION	1	1,412 octets	2.1%
RT_MANIFEST	1	1,830 octets	2.7%

Analyse de la chaîne de certificats

▼

Certificat #1

Sujet	Konstantin Polyakov Konstantin Polyakov RU
Émetteur	Sectigo RSA Code Signing CA
Numéro de série	`291527224788033781612269411320583171962`

Certificat #2

Sujet	USERTrust RSA Certification Authority The USERTRUST Network US
Émetteur	AAA Certificate Services
Numéro de série	`76359301477803385872276235234032301461`

Certificat #3

Sujet	Sectigo RSA Code Signing CA Sectigo Limited GB
Émetteur	USERTrust RSA Certification Authority
Numéro de série	`39390228139828865494873669055555031914`

Certificat #4

Sujet	Sectigo RSA Time Stamping CA Sectigo Limited GB
Émetteur	USERTrust RSA Certification Authority
Numéro de série	`63883093293784159655322269805543173561`

Certificat #5

Sujet	Sectigo RSA Time Stamping Signer #4 Sectigo Limited GB
Émetteur	Sectigo RSA Time Stamping CA
Numéro de série	`76161378635050837295056099126206603988`

Statut de vérification du certificat

Rappelez-vous : ceci est le résultat de l'analyseur de virus en ligne

Gridinsoft Anti-Malware dispose d'un moteur d'analyse de virus beaucoup plus puissant. Nous vous recommandons de l'utiliser pour un diagnostic plus précis des systèmes infectés. Ce bref guide vous aidera à installer notre produit phare pour des diagnostics plus précis :

Télécharger Anti-Malware

Laisser un commentaire

Nom du fichier	reg-organizer-setup.exe
Type de fichier	PE32 executable (GUI) Intel 80386, for MS Windows
Version du scanner	1.0.146.174
Version de la base de données	2023-11-06 11:00:50 UTC