regpairsetup.exe

RegSofts Software

This is a setup and installation application. This is installed with Free Window Registry Repair. The file has been seen being downloaded from download.heise.de and multiple other hosts.
Publisher:
RegSofts Software

Description:
Free Window Registry Repair

Version:
2.8

MD5:
4ab9672463dde39147b246c94a6ff8ad

SHA-1:
928cad1ea782673dd061ee50730c1c62434aa034

SHA-256:
89592786287a6a63da58e2282a46c9e756bf3c1cb2ede99bdeaf8b66e606cdd6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 12:08:12 AM UTC  (today)

File size:
784.8 KB (803,636 bytes)

Copyright:
RegSofts Software

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\regpairsetup.exe

File PE Metadata
Compilation timestamp:
4/25/2000 10:37:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:xOVEtuyS/j8sO6pvEuqQ72E4XGt9ktv7/zzrvQm7VzhSTldiMVIhi:xx1qI6vEBfX9l7rfvQIhSJdbIE

Entry address:
0x21AF

Entry point:
55, 8B, EC, 81, EC, 2C, 05, 00, 00, 53, 56, 57, 6A, 01, 5E, 6A, 04, 89, 75, E8, FF, 15, 54, 40, 40, 00, FF, 15, 50, 40, 40, 00, 8B, F8, 89, 7D, F4, 8A, 07, 3C, 22, 0F, 85, 90, 00, 00, 00, 8A, 47, 01, 47, 89, 7D, F4, 33, DB, 3A, C3, 74, 0D, 3C, 22, 74, 09, 8A, 47, 01, 47, 89, 7D, F4, EB, EF, 80, 3F, 22, 75, 04, 47, 89, 7D, F4, 80, 3F, 20, 75, 09, 47, 80, 3F, 20, 74, FA, 89, 7D, F4, 53, FF, 15, 6C, 40, 40, 00, 80, 3F, 2F, 89, 45, F8, 75, 28, 8A, 47, 01, 3C, 53, 74, 04, 3C, 73, 75, 06, 89, 35, 58, 53, 40, 00...
 
[+]

Entropy:
7.9941  (probably packed)

Code size:
8.5 KB (8,704 bytes)

The file regpairsetup.exe has been discovered within the following program.

Free Window Registry Repair  by RegSofts+Software
Free Window Registry Repair is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.
56% remove it
 
Powered by Should I Remove It?

The file regpairsetup.exe has been seen being distributed by the following 13 URLs.

Scan regpairsetup.exe - Powered by Reason Core Security