home

registerlsp64.exe

RegisterLSP64.exe

Astrill

This is installed with Astrill.
Publisher:
Astrill  (signed and verified)

Product:
RegisterLSP64.exe

Description:
RegisterLSP

Version:
2.2.1.1

MD5:
f2acecfaba0c2c65eaf7584430c7c1d1

SHA-1:
33795498b8e6822314109f1dc27ae43e2a2e7483

SHA-256:
36c58836c6d3987ced6a564d1388e9958a46c021c80e3aa864c8b71cf09053a0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 8:18:23 AM UTC  (today)

File size:
370.4 KB (379,304 bytes)

Product version:
2.2.1.1

Copyright:
Copyright © 2010

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\astrill\registerlsp64.exe

Digital Signature
Signed by:
Astrill

Authority:
GlobalSign nv-sa

Valid from:
6/30/2011 7:55:57 PM

Valid to:
6/30/2014 7:55:57 PM

Subject:
CN=Astrill, O=Astrill, C=AU

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121F61ACD592FA15F6E46FE69285A269A64

File PE Metadata
Compilation timestamp:
8/27/2012 8:34:57 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
6144:8IhuGgaWr5JStl9/54/6mTF6uxHotAjDJ4TaIuI+R8:8IuuqHS3RXYDJ4Tar8

Entry address:
0x2E320

Entry point:
48, 83, EC, 28, E8, 2F, 97, 00, 00, 48, 83, C4, 28, E9, 76, FE, FF, FF, CC, CC, 48, 89, 54, 24, 10, 4C, 89, 44, 24, 18, 4C, 89, 4C, 24, 20, 55, 53, 57, 48, 8B, EC, 48, 83, EC, 50, 48, 83, 65, D0, 00, 48, 8B, FA, 33, D2, 48, 8B, D9, 48, 8D, 4D, D8, 44, 8D, 42, 28, E8, 89, E3, FF, FF, 48, 85, FF, 75, 15, E8, 0F, 07, 00, 00, C7, 00, 16, 00, 00, 00, E8, 9C, 06, 00, 00, 83, C8, FF, EB, 4B, 48, 85, DB, 74, E6, 4C, 8D, 4D, 30, 48, 8D, 4D, D0, 45, 33, C0, 48, 8B, D7, C7, 45, D8, FF, FF, FF, 7F, C7, 45, E8, 42, 00...
 
[+]

Entropy:
6.1307

Code size:
264 KB (270,336 bytes)

The file registerlsp64.exe has been discovered within the following program.

Astrill  by Astrill
www.astrill.com
About 8% of users remove it
 
Powered by Should I Remove It?

Scan registerlsp64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.