filtreg.exe

  • File Path: C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\filtreg.exe
  • Description: Filter registration dump utility

Hashes

Type Hash
MD5 BF946D79EEEBC25025F6D820D2B4E647
SHA1 298677A9657B2E875239B0050BC50B3B836938D5
SHA256 F0F9DDD62DC5059F7D276F7D6C53A3C4C95B58F739AC6220CE9A4796B89718FF
SHA384 BCC42A539D352FAD3F23F5A7129D96A5E7C17E3AED187E165C2240DC336EFA1568507990AB7C32666ABA208EF9B6391E
SHA512 FBAED74F851AAA4706B7F5D65A5A7468B96D71C152420590AC1670837A3B1FF364B178559B0CB55D32C8776D25323D02EF3832DAB2F2AAC4A3C8BDEF4B008614
SSDEEP 192:2gDxWvMeqftib1RkJn1M7EtZDSqyBz/a6S13Gy5LIWwyW:jKqfti5RKnLZuqrh13+WwyW
IMP EBA37C722604402F437253AB7EB9B9AC
PESHA1 5CC7CE743113C463C741B6435A0610DFCD118ADE
PE256 6B09D7587A93B9061B0F4022D2E8493B96BB2251914334017D222A5C2753F743

Runtime Data

Usage (stdout):

Usage: filtreg [dstExt] [srcExt]
  Displays IFilter registrations.  If [dstExt] and [srcExt]
  are specified then [dstExt] is registered to act like [srcExt].

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\filtreg.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: The file C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\filtreg.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at https:/go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: filtreg.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/f0f9ddd62dc5059f7d276f7d6c53a3c4c95b58f739ac6220ce9a4796b89718ff/detection

MIT License. Copyright (c) 2020-2021 Strontic.