home

regsvr.exe

MD5:
dc359a3300a7cd9737253c474e70c9d6

SHA-1:
50da673be0c83d7c5fc84f8a983649890f3e36db

SHA-256:
cef30e631ae1afc5faae2ad7266769649c03e54cb5515b9a26feebe036dbdd86

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/3/2025 10:52:11 AM UTC  (today)

Scan engine
Detection
Engine version

Kaspersky
Worm.Win32.AutoRun
15.0.2.529

File size:
1.2 MB (1,210,017 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\regsvr.exe

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x53E3D

Entry point:
60, 0D, BF, 58, 11, CD, 86, D8, 0F, CD, 57, 68, A3, 81, 96, 00, F6, C4, 89, C6, C7, D7, 87, F9, 0F, AC, EA, FF, 88, D6, D2, E7, 0F, C8, 81, FA, 9F, 4E, 5E, 64, 0F, AC, F2, 5C, 88, DA, E8, 3C, 00, 00, 00, 0F, BE, D5, 0F, BD, C6, 0F, BC, FE, 0F, BF, EE, 87, F2, FE, C4, F6, C3, BA, 0F, B6, C9, 0F, BF, F8, 8D, 28, F6, C3, A0, 0F, CE, 8D, 0D, 1C, 1B, 7A, AE, 55, 81, F7, 2B, 35, 57, A1, F7, C6, AF, D6, 09, EC, 5B, 81, EA, 5D, 46, 72, 9C, 88, C9, 5E, 0F, B3, C8, 03, D9, D2, EE, 0F, AF, DE, 81, C6, CD, 5A, 06, 00...
 
[+]

Entropy:
6.1854

Code size:
404.5 KB (414,208 bytes)

Scan regsvr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.