home

api-ms-win-core-localregistry-l1-1-0.dll

ApiSet Stub DLL

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
ApiSet Stub DLL

Version:
6.1.7600.17107 (win7_gdr.120817-0952)

MD5:
c6ac10422916b057802dbe70d06807bc

SHA-1:
3bd151d4637e7cbd8f4aa046fdd9b49817e91e2b

SHA-256:
bf318f68a01995149952f3fa7c5be45ba6d66d147d2f3754ce836f85f1016219

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:07:59 AM UTC  (today)

File size:
4 KB (4,096 bytes)

Product version:
6.1.7600.17107

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
apisetstub

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\windows\temp\8cb18dc7-c5b4-496b-a23e-66eafe0d0f75\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17107_none_0ae0ab79dce0fb26\api-ms-win-core-localregistry-l1-1-0.dll

File PE Metadata
Compilation timestamp:
8/18/2012 1:10:01 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
48:qUg0QX5Yy0kXW0By19u/kbuSkdIZWUcKrh/5Wwa:CJYHaS+EWsdhWw

Entry address:
0x10D9

Entry point:
8B, FF, 55, 8B, EC, 8B, 45, 0C, 48, 74, 05, 33, C0, 40, EB, 02, 33, C0, 5D, C2, 0C, 00, CC, 00, 00, 00, 00, CD, 37, 2F, 50, 00, 00, 00, 00, A8, 12, 00, 00, 01, 00, 00, 00, 28, 00, 00, 00, 28, 00, 00, 00, 18, 11, 00, 00, B8, 11, 00, 00, 58, 12, 00, 00, 8C, 10, 00, 00, 62, 10, 00, 00, 62, 10, 00, 00, 6D, 10, 00, 00, 6D, 10, 00, 00, CE, 10, 00, 00, CE, 10, 00, 00, CE, 10, 00, 00, CE, 10, 00, 00, 78, 10, 00, 00, 81, 10, 00, 00, 81, 10, 00, 00, 81, 10, 00, 00, 81, 10, 00, 00, 8C, 10, 00, 00, 6D, 10, 00, 00, 97...
 
[+]

Code size:
1.5 KB (1,536 bytes)

The file api-ms-win-core-localregistry-l1-1-0.dll has been seen being distributed by the following 2 URLs.

http://dc743.4shared.com/download/.../API-MS-Win-Core-LocalRegistry-.dll?tsid=20160702-024531-ca5725df&sbsr=28ace82841102864bff907d9f307a8e097a&lgfp=2000

http://super-hacking.kvalitne.cz/.../API-MS-Win-Core-LocalRegistry-L1-1-0.dll

Scan api-ms-win-core-localregistry-l1-1-0.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.