Gridinsoft Logo
File Icon

The regedt32.exe (Registry Editor Utility) File Analysis

Updated 2 months ago
Checked by Malaware Check
regedt32.exe

Technical Analysis

File Name regedt32.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 23:00:44 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
11,776
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
c6b24486de73a457d582f6beeaabc983
SHA1
b876b5c799226f6d6dbc4348b161de8f457ea968
SHA256
a83d55c6f3fd0e634d4cd570ced654a8bdc1776027680bc3f003476e764cc499
SHA512
59d38ae1a915c73d565bdecb9ff10c3074b021dc2d2b144dd6636fb59bf15085c76a306f09403617065fe21a3dec91b4f744fe63ea79004df0dc730e14e6557c
ImpHash
a3060ec916831020104fae5bc9414975

PE Analysis

Basic Information

▼
Icon
Hash: 193ebe5d32b583f1949f4c75093fad52
Fuzzy: 4a06a33d23d0225bf06d4edf405d868a
dHash: 3bb284b2a68d92a2
Image Base 0x140000000
Entry Point 0x140001300
Compilation Time 1979-08-09 02:37:16
Checksum 0x0000e657 (Actual: 0x0000e657)
OS Version 10.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path regedt32.pdb
Digital Signature No valid SignedData structure was found.
Imports 4 libraries
KERNEL32, msvcrt, SHELL32, api-ms-win-core-shlwapi-legacy-l1-1-0
Exports 0 functions
Resources 4 Resources
Sections 6 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Registry Editor Utility
FileVersion 10.0.19041.1 (WinBuild.160101.0800)
InternalName regedt32.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename regedt32.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.19041.1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,928 bytes 3,072 bytes 5.73 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ CB9DF75F0EAC1A930CDA61762C87C67F
.rdata 0x00002000 2,822 bytes 3,072 bytes 4.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 74DB8EAE5E18046A969417D2245FCF4D
.data 0x00003000 1,656 bytes 512 bytes 0.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FAAEF9CD90101840434E88223AAA01C4
.pdata 0x00004000 240 bytes 512 bytes 1.99 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6C80B2E4BDCFED3FFD5E399A04BF1EC3
.rsrc 0x00005000 2,688 bytes 3,072 bytes 3.86 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D2C328D7EE85E00B44E4404419045E40
.reloc 0x00006000 32 bytes 512 bytes 0.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 977312E6F65B98F4643C03B62B8FDBD9

Resource Analysis

▼
Total Resources: 4 (2,375 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 744 bytes
31.3%
RT_GROUP_ICON 1 20 bytes
0.8%
RT_VERSION 1 932 bytes
39.2%
RT_MANIFEST 1 679 bytes
28.6%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Registry Editor Utility
File Version 10.0.19041.1 (WinBuild.160101.0800)
Original Name regedt32.exe
Internal Name regedt32.exe
Copyright © Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware