home

Ereg.exe

SSEreg

Nuance Communications, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Nuance PDF Professional 5-reminder’.
Publisher:
Nuance Communications, Inc.  (signed and verified)

Product:
SSEreg

Description:
Ereg (Unicode version)

Version:
5, 2, 0, 0

MD5:
0034a1edd71c5a9dade651b91b6d39c2

SHA-1:
cbb22749ea62c9734f501ce1905fd4e9e0f5c281

SHA-256:
766ad4a81bb05d5284d75809f0875f2f954e7e47cdf36b9fbd293b70f804c3f7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 12:34:30 PM UTC  (today)

File size:
321.3 KB (328,992 bytes)

Product version:
5, 2, 0, 0

Copyright:
Copyright © 1993-2007 Nuance Communications, Inc.

Original file name:
Ereg.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\nuance\pdf professional 5\ereg\ereg.exe

Digital Signature
Signed by:
Nuance Communications, Inc.

Authority:
VeriSign, Inc.

Valid from:
6/22/2007 3:00:00 AM

Valid to:
7/6/2008 2:59:59 AM

Subject:
CN="Nuance Communications, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Nuance Communications, Inc.", S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
599E6615B1E2A73FEB811BFDC5BACDC3

File PE Metadata
Compilation timestamp:
8/31/2007 10:02:22 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x209D4

Entry point:
E8, B5, 56, 00, 00, E9, 17, FE, FF, FF, 8B, 44, 24, 04, 53, 8B, 5C, 24, 0C, 66, 83, 3B, 00, 57, 8B, F8, 74, 45, 0F, B7, 08, 66, 85, C9, 74, 3B, 0F, B7, D1, 2B, C3, 66, 85, D2, 8B, 4C, 24, 10, 74, 1B, 0F, B7, 11, 66, 85, D2, 74, 2A, 0F, B7, 1C, 08, 0F, B7, D2, 2B, DA, 75, 08, 41, 41, 66, 39, 1C, 08, 75, E5, 66, 83, 39, 00, 74, 11, 47, 47, 0F, B7, 17, 40, 40, 66, 85, D2, 75, CA, 33, C0, 5F, 5B, C3, 8B, C7, EB, F9, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8...
 
[+]

Entropy:
6.3256

Code size:
220 KB (225,280 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Nuance PDF Professional 5-reminder

Command:
"C:\Program Files\nuance\pdf professional 5\ereg\ereg.exe" -r "C:\ProgramData\nuance\pdf professional 5\ereg\ereg.ini"


Scan Ereg.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.