» REGSVR32.EXE
Overview
Analysis
File Details

REGSVR32.EXE

InstallMate

Tarma Software Research Ltd

File name:

REGSVR32.EXE

Publisher:

Microsoft Corporation (signed by Tarma Software Research Ltd)

Product:

InstallMate

Description:

Out-of-process DLL registration helper

Version:

2017.03.04.1626U

MD5:

7d314f9bb609157e5ee9d86c56025487

SHA-1:

2e96b90caf681f555c298bcda876c8d79944bb37

SHA-256:

0fa48230ef43f2b9545421e7377d7e646cb2d1e558f75eccd8f12497bc11dfa6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 12:58:16 PM UTC (today)

File size:

21.4 KB (21,928 bytes)

Product version:

9.65.0.6273

Trademarks:

Tarma® and InstallMate® are registered trademarks of Tarma Software Research Ltd

Original file name:

REGSVR32.EXE

File type:

Executable application (Win64 EXE)

Language:

Language Neutral

Common path:

C:\ProgramData\installmate\{100a0e84-2f27-4776-bd1f-8105a27dfa56}\x64\regsvr32.exe

Digital Signature

Signed by:

Tarma Software Research Ltd

Authority:

DigiCert Inc

Valid from:

8/21/2014 2:00:00 AM

Valid to:

10/25/2017 2:00:00 PM

Subject:

CN=Tarma Software Research Ltd, O=Tarma Software Research Ltd, L=St Albans, S=Hertfordshire, C=GB, SERIALNUMBER=09173284, OID.1.3.6.1.4.1.311.60.2.1.3=GB, OID.2.5.4.15=Private Organization

Issuer:

CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

02F1131FF1F41A8447B50AC087387AB3

File PE Metadata

Compilation timestamp:

3/4/2017 6:28:48 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

Entry address:

0x1404

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, B9, 01, 00, 00, 00, FF, 15, 42, 0C, 00, 00, 33, C9, FF, 15, 4A, 0C, 00, 00, 33, F6, 33, DB, 33, FF, FF, 15, 26, 0C, 00, 00, 66, 41, B8, 20, 00, 4C, 8B, D8, 8D, 56, 02, 66, 45, 39, 03, 74, 07, 66, 41, 83, 3B, 09, 75, 05, 4C, 03, DA, EB, EE, 66, 41, 83, 3B, 00, 0F, 84, 3F, 01, 00, 00, 66, 41, 83, 3B, 2F, 74, 56, 66, 41, 83, 3B, 2D, 74, 4F, 66, 41, 83, 3B, 22, 75, 20, 4C, 03, DA, 49, 8B, F3, 66, 41, 83, 3B, 00, 74, C1, 66, 41, 83, 3B, 22, 74, 26, 4C... 
[+]

Entropy:

6.6879

Code size:

1.5 KB (1,536 bytes)

Scan REGSVR32.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.