home

avira_registry_cleaner_en.exe

Avira RegistryCleaner

Avira Operations GmbH & Co. KG

Publisher:
Avira Operations GmbH & Co. KG  (signed and verified)

Product:
Avira RegistryCleaner

Version:
2.0.2.0

MD5:
f081935a884aef6f7bfcf2fd2b936cf9

SHA-1:
2c53d49bd510a2a006643f9013f32af6049056c6

SHA-256:
9d382f3056658c019a1d0f95a28fc9d8572691593d68dfe88e0addf6e44f1343

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:24:23 PM UTC  (today)

File size:
2.8 MB (2,975,136 bytes)

Product version:
2.0

Copyright:
Copyright © 2000 - 2015 Avira Operations GmbH & Co. KG and its Licensors

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\avira_registry_cleaner_en.exe

Digital Signature
Signed by:
Avira Operations GmbH & Co. KG

Authority:
VeriSign, Inc.

Valid from:
1/17/2014 1:00:00 AM

Valid to:
1/17/2017 12:59:59 AM

Subject:
CN=Avira Operations GmbH & Co. KG, OU=Global Assembly, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Avira Operations GmbH & Co. KG, L=Tettnang, S=Baden-Württemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3AEA7D79BC1D84D2E1AB0FFC8BC35658

File PE Metadata
Compilation timestamp:
11/17/2015 9:20:30 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:0DPCM6QZinrRCSx2MGbGPIenCqvJoNUpT:0DGIc/nCBUh

Entry address:
0x215520

Entry point:
55, 8B, EC, 83, C4, F0, B8, 0C, D2, 60, 00, E8, 90, 8D, DF, FF, E8, 1F, 7B, FF, FF, A1, E0, AF, 61, 00, 8B, 00, E8, D7, 5E, FD, FF, A1, E0, AF, 61, 00, 8B, 00, BA, A8, 55, 61, 00, E8, F6, 58, FD, FF, BA, D4, 55, 61, 00, B1, 01, B8, 00, 56, 61, 00, E8, B9, 3E, E1, FF, 34, 01, 8B, 15, E0, AF, 61, 00, 8B, 12, 88, 42, 6F, 8B, 0D, 10, AD, 61, 00, A1, E0, AF, 61, 00, 8B, 00, 8B, 15, 10, B5, 60, 00, E8, A8, 5E, FD, FF, A1, E0, AF, 61, 00, 8B, 00, E8, F8, 5F, FD, FF, E8, 17, 3C, DF, FF, 00, 00, 00, B0, 04, 02, 00...
 
[+]

Entropy:
6.5172

Developed / compiled with:
Microsoft Visual C++

Code size:
2.1 MB (2,180,096 bytes)

The file avira_registry_cleaner_en.exe has been seen being distributed by the following 6 URLs.

http://uninst.ru/go3.php?url=http://dlpro.antivir.com/package/regcleaner/win32/.../avira_registry_cleaner_en.exe

https://www.google.com/url?hl=en&q=http://greenarrow.pcpitstopmail.com/click.php/e3185/.../&source=gmail&ust=1462718896685000&usg=AFQjCNHDZEMy4UxYmcxrSmLf-UeI7OTfhg

http://install.avira-update.com/package/regcleaner/win32/.../avira_registry_cleaner_en.exe

https://www.avira.com/downloads/.../defaultDownload?product=avira-registry-cleaner&os=

http://professional.avira-update.com/package/regcleaner/win32/.../avira_registry_cleaner_en.exe

http://www.avira.com/downloads/.../defaultDownload?product=avira-registry-cleaner&os=

Scan avira_registry_cleaner_en.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.