reg.exe
Registry Console Tool by Microsoft
| Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| MD5: | 9d0b3066fe3d1fd345e86bc7bcced9e4 |
| SHA1: | e05984a6671fcfecbc465e613d72d42bda35fd90 |
| SHA256: | 4e66b857b7010db8d4e4e28d73eb81a99bd6915350bb9a63cd86671051b22f0e |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
reg.exe adds run once key to the current user's profile so that the file will execute the next time the user logs into Windows (it will delete the entry after it runs once). This is typically installed with the program MSTech Folder Icon Basic published by MSTech (Modern Software Technology). This version is designed to run on Windows 7.
Details
| File name: | reg.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Registry Console Tool |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\reg.exe |
| Original name: | reg.exe.mui |
| File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| Product version: | 6.1.7600.16385 |
| Size: | 73 KB (74,752 bytes) |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
|
MSTech (Modern Software Technology) |
|
Behaviors
Startup files (user) run once
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
- 'adawarebp_XP' → reg.exe delete "HKCU\Software\adawarebp" /f
- 'antiphishing-passwordbox_XP' → reg.exe delete "HKCU\Software\antiphishing-passwordbox" /f
- 'antiphishing-passwordbox' → reg.exe delete "HKCU\Software\AppDataLow\Software\antiphishing-passwordbox" /f
- 'adawarebp' → reg.exe delete "HKCU\Software\AppDataLow\Software\adawarebp" /f
- 'panda4_0dn_XP' → reg.exe delete "HKCU\Software\panda4_0dn" /f
- 'panda4_0dn' → reg.exe delete "HKCU\Software\AppDataLow\Software\panda4_0dn" /f
- 'toolbarcleaner_XP' → reg.exe delete "HKCU\Software\toolbarcleaner" /f
- 'toolbarcleaner' → reg.exe delete "HKCU\Software\AppDataLow\Software\toolbarcleaner" /f
- 'mystart_ad_XP' → reg.exe delete "HKCU\Software\mystart_ad" /f
- 'vmnantiphishing_ad_XP' → reg.exe delete "HKCU\Software\vmnantiphishing_ad" /f
- 'vmnantiphishing_ad' → reg.exe delete "HKCU\Software\AppDataLow\Software\vmnantiphishing_ad" /f
- 'mystart_ad' → reg.exe delete "HKCU\Software\AppDataLow\Software\mystart_ad" /f
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate N |
72.22% |
|
| Windows 7 Professional |
11.11% |
|
| Windows 7 Ultimate |
11.11% |
|
| Windows 7 Home Premium |
5.56% |
|
Distribution by country
United States installs about 77.78% of Registry Console Tool.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Lenovo |
57.14% |
|
| Samsung |
28.57% |
|
| Hewlett-Packard |
14.29% |
|
