Versions

6.1.7600.16385 (win7_rtm.090713-1255)	72.22%
6.1.7600.16385 (win7_rtm.090713-1255)	27.78%

(Note, Microsoft publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

• dbgsvc.exe (Debug Diagnostic Tool by Microsoft Corporation)
• fhautoplay.dll (by Microsoft)
• buildnotification.exe (by Microsoft)
• ehexthost.exe (Media Center Extensibility Host by Microsoft)
• onenoteim.exe (Microsoft OneNote by Microsoft Corporation)
• powershell.exe (Windows PowerShell by Microsoft)
• ipoverusbsvc.exe (Microsoft Windows Operating System by Microsoft Corporation)
• iedvtool.dll (Internet Explorer by Microsoft)
• korime.exe (Microsoft IME by Microsoft)
• chtime.exe (Microsoft IME by Microsoft)
• emet_gui.exe (Enhanced Mitigation Experience Toolkit by Microsoft Corporation)
• emet_agent.exe (Enhanced Mitigation Experience Toolkit by Microsoft Corporation)
• filemanager.exe (OneDrive by Microsoft Corporation)
• mstore.exe (Microsoft Clip Organizer by Microsoft Corporation)
• chsime.exe (Microsoft IME by Microsoft)
• scardsvr.dll (Smart Card Resource Management Server by Microsoft)
• gpsvc.dll (Group Policy Client by Microsoft)
• certprop.dll (Microsoft Smartcard Certificate Propagation Service by Microsoft)
• integratedoffice.exe (Microsoft Office by Microsoft Corporation)
• actioncenter.dll (Action Center by Microsoft)
• f12tools.dll (Internet Explorer by Microsoft)
• ndsm.exe (by Microsoft)
• mdres.exe (Windows Memory Diagnostic by Microsoft)
• wlidsvc.dll (by Microsoft)
• reseteng.dll (by Microsoft)
• numbers.exe (Numbers by Microsoft)
• systemsettings.exe (by Microsoft)

reg.exe

Registry Console Tool by Microsoft

Overview

Programs installed in

Behaviors

• 'adawarebp_XP' → reg.exe delete "HKCU\Software\adawarebp" /f
• 'antiphishing-passwordbox_XP' → reg.exe delete "HKCU\Software\antiphishing-passwordbox" /f
• 'antiphishing-passwordbox' → reg.exe delete "HKCU\Software\AppDataLow\Software\antiphishing-passwordbox" /f
• 'adawarebp' → reg.exe delete "HKCU\Software\AppDataLow\Software\adawarebp" /f
• 'panda4_0dn_XP' → reg.exe delete "HKCU\Software\panda4_0dn" /f
• 'panda4_0dn' → reg.exe delete "HKCU\Software\AppDataLow\Software\panda4_0dn" /f
• 'toolbarcleaner_XP' → reg.exe delete "HKCU\Software\toolbarcleaner" /f
• 'toolbarcleaner' → reg.exe delete "HKCU\Software\AppDataLow\Software\toolbarcleaner" /f
• 'mystart_ad_XP' → reg.exe delete "HKCU\Software\mystart_ad" /f
• 'vmnantiphishing_ad_XP' → reg.exe delete "HKCU\Software\vmnantiphishing_ad" /f
• 'vmnantiphishing_ad' → reg.exe delete "HKCU\Software\AppDataLow\Software\vmnantiphishing_ad" /f
• 'mystart_ad' → reg.exe delete "HKCU\Software\AppDataLow\Software\mystart_ad" /f

All file variations of reg.exe

Distribution by Windows OS

Distribution by country

Distribution by PC manufacturer