home

regmap.ppl

Kaspersky Anti-Virus

Kaspersky Lab

Publisher:
Kaspersky Lab  (signed and verified)

Product:
Kaspersky Anti-Virus

Description:
REGISTRY_MAPPER

Version:
11.0.0.1245

MD5:
3db5ad9142a4b656ca6f8be572720710

SHA-1:
4922572d17c07271f3b0c54554ebb53351a9c65f

SHA-256:
05ec1cb01346b36851e59c1ca46039fc585477f2814ac6d67ffb34423310a7a0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 1:53:17 PM UTC  (today)

File size:
18.7 KB (19,136 bytes)

Product version:
11.0.0.1245

Copyright:
Copyright © Kaspersky Lab 1997-2009.

Trademarks:
Kaspersky™ Anti-Virus ® is registered trademark of Kaspersky Lab.

Original file name:
REGISTRY_MAPPER.PPL

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\regmap.ppl

Digital Signature
Signed by:
Kaspersky Lab

Authority:
DigiCert Inc

Valid from:
2/22/2013 7:00:00 AM

Valid to:
4/28/2015 7:00:00 PM

Subject:
CN=Kaspersky Lab, O=Kaspersky Lab, L=Moscow, C=RU

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0226E6BDA76DAE711E3DB2321E3B5308

File PE Metadata
Compilation timestamp:
3/31/2011 1:02:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
384:eyfcQApEnkQoRdi2MiOr7E0PPZYMClMhg/CZZvDY8:eEcQcEkQoRA2MiOr75BFa8

Entry address:
0x1000

Entry point:
55, 8B, EC, 8B, 45, 0C, 83, E8, 64, 74, 10, 48, 75, 06, 21, 05, 88, 30, 72, 6D, 33, C0, 40, 5D, C2, 0C, 00, 8B, 45, 08, 56, 8B, 75, 10, A3, 88, 30, 72, 6D, 83, 26, 00, FF, 35, 88, 30, 72, 6D, E8, 01, 0C, 00, 00, 85, C0, 59, 89, 06, 5E, 79, D7, 33, C0, EB, D6, 66, 33, C0, C3, 33, C0, 33, D2, C3, B8, C2, 00, 00, 80, C3, 32, C0, C3, 33, C0, C3, 56, 8B, F1, 8B, 8E, 18, 01, 00, 00, 85, C9, 74, 1D, 8D, 46, 18, 3B, C8, 74, 0F, 8D, 46, 04, 8B, 10, 51, 50, FF, 92, D8, 00, 00, 00, 59, 59, 83, A6, 18, 01, 00, 00, 00...
 
[+]

Entropy:
6.5653

Developed / compiled with:
Microsoft Visual C++

Code size:
4 KB (4,096 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.