home

XmlRegBuilder.dll

SIMON JARVIS

Publisher:
SIMON JARVIS  (signed and verified)

Description:
USMT Registry Builder

Version:
1.0.0.2

MD5:
76b7990a3bcbc0730c439fa3aa395131

SHA-1:
bfd028b3dbdaeeeca0767a7844347d9299a42142

SHA-256:
6d1c08c5703c41d561b098249500e074a83e11737ce8a87d6c45761fcd684232

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:42:28 PM UTC  (today)

File size:
9 MB (9,449,032 bytes)

Product version:
1.0.0.2

Copyright:
Simon Jarvis (c)

Trademarks:
Simon Jarvis (c)

Original file name:
XmlRegBuilder.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\wintools\usmt xml builder\xmlregbuilder.dll

Digital Signature
Signed by:
SIMON JARVIS

Authority:
COMODO CA Limited

Valid from:
1/8/2013 1:00:00 AM

Valid to:
1/9/2015 12:59:59 AM

Subject:
CN=SIMON JARVIS, O=SIMON JARVIS, STREET=10 ELSVERN AVENUE, L=BELMONT, S=VICTORIA, PostalCode=3216, C=AU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A54C8C157114A00EA57A84AE7E1A3E1E

File PE Metadata
Compilation timestamp:
9/19/2014 5:07:39 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:0FGDlJQFBFI4m5dEcgF22Hz0seZpEj3xta4ey9J6hlPDnPRPGADIXAKh19UNe8AT:iGW20Qt+TnA3PR9DiB8AvfhJaw4Ioaxr

Entry address:
0x2E5450

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 72, 6F, 01, 00, 8B, 45, 10, 50, 8B, 4D, 0C, 51, 8B, 55, 08, 52, E8, 11, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 6A, FE, 68, C8, C4, 6C, 10, 68, E0, AD, 2E, 10, 64, A1, 00, 00, 00, 00, 50, 83, C4, E8, 53, 56, 57, A1, D0, 4C, 6E, 10, 31, 45, F8, 33, C5, 50, 8D, 45, F0, 64, A3, 00, 00, 00, 00, 89, 65, E8, C7, 45, E4, 01, 00, 00, 00, 83, 7D, 0C, 00, 75, 10, 83, 3D, 3C, FA, 6F, 10, 00, 75, 07, 33, C0, E9, 5A, 01, 00, 00...
 
[+]

Entropy:
6.7450

Developed / compiled with:
Microsoft Visual C++

Code size:
6 MB (6,265,856 bytes)

Scan XmlRegBuilder.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.