aspnet_regsql.exe
aspnet_regsql.exe file version info
Program on Windows 4 known copies with hashes
Is it the real aspnet_regsql.exe?
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\C:\Windows\Microsoft.NET\Framework\v4.0.30319\4 known copies
4.8.4161.0 built by: NET48REL1 · C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe · signed by Microsoft Windows
792ec1d1493d476b092e7b793fc8aef03f919ad30699f968e6d1e7f7ad66c3334.8.4161.0 built by: NET48REL1 · C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_regsql.exe · signed by Microsoft Windows
d9caa6d2485118af8f938cfaaaaeb5f410551be3aff06bda55d744544cf72f784.8.4084.0 built by: NET48REL1 · C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe · signed by Microsoft Windows
7f582c408bb9c117142321b84d0d95daa1225f06c696575aaf779f9a495e001c4.8.4084.0 built by: NET48REL1 · C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regsql.exe · signed by Microsoft Windows
ba5780a2ef7092dcd5eeb2625077fe558605983ab8486b2d7d0e3040630511aaFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.