home

RegAsm.exe

Microsoft .NET Framework

Microsoft Corporation

RegAsm.exe is the Assembly Registration tool reads the metadata within an assembly and adds the necessary entries to the registry, which allows COM clients to create .NET Framework classes and is recompiled by Microsoft Corporation. This is a setup program which is used to install the application.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
Microsoft .NET Assembly Registration Utility

Version:
4.0.30319.1 (RTMRel.030319-0100)

MD5:
c28046946af1768df49a7cd84b16bcad

SHA-1:
0269fa6adaa6a9a161f511a4eb6e43c94e76a8b1

SHA-256:
505d886fff0542f600f8534d9691de02200b719f1b80487a84fa799e1b178696

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 5:27:10 AM UTC  (today)

File size:
50.8 KB (52,040 bytes)

Product version:
4.0.30319.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
RegAsm.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\dotnet40\windows\microsoft.net\framework\v4.0.30319\regasm.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 11:40:29 PM

Valid to:
3/7/2011 11:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
3/18/2010 8:51:39 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:N2fS6cJi0Q2CeJTt+Pj4ahDxo63RlIK8DQfqCN24kcRvoHq/Gn1Gz3i9+6rqnlwo:ZcIK8DQfqCNfkcRv2q/Go24lwuP95d

Entry address:
0xC6EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
42 KB (43,008 bytes)

The file RegAsm.exe has been seen being distributed by the following 2 URLs.

ftp://ftp2.smartinova.com.br/Suporte/Nota Fiscal Eletr�nica/PACOTE_INSTALACAO_DLL_NFE/PACOTE_INSTALACAO_DLL_NFE/PASSO 3 - DLL, OCX E REGISTRO/.../RegAsm.exe

https://qc-api.int.net.nokia.com/AMC/.../regasm.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.