How to remove ApplicationRegistration.exe

ApplicationRegistration.exe

The module ApplicationRegistration.exe has been detected as Trojan.Heur!

ApplicationRegistration.exe

ApplicationRegistration.exe is a Windows file recorded in the ThreatInfo database. It is associated with Sony ApplicationRegistration. The reported company name is Sony Creative Software Inc.. The current detection status is Trojan.Heur!, based on the latest analysis from 2022-01-06 21:59:07 (4 years ago).

If ApplicationRegistration.exe appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Trojan.Heur!.

Product Name: Sony ApplicationRegistration
Company Name: Sony Creative Software Inc.
MD5: a5c34903d6743f94ae16cf6f87215cac
Size: 4 MB
First Published: 2022-01-06 21:59:07 (4 years ago)
Latest Published: 2022-01-06 21:59:07 (4 years ago)
Status: Trojan.Heur! (on last analysis)
Analysis Date: 2022-01-06 21:59:07 (4 years ago)
Signed By: Sony Creative Software Inc
Status: Invalid (digital signature could be stolen or file could be patched)

The signature on ApplicationRegistration.exe is not reported as trusted and valid. Invalid or suspicious signature data can indicate tampering, repackaging, or an unrelated file using copied publisher information.

%programfiles%\sony

ThreatInfo has observed ApplicationRegistration.exe in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

100.0%

The strongest geographic signal for this file is Benin with 100.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 10 100.0%

The most common operating system signal for ApplicationRegistration.exe is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

ApplicationRegistration.exe is identified as pe for 64 systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x00139d6c

PE Sections:

Name Size of data MD5
.text 2861056 c9f65bcc2d4cfdd6210d5fce4d7ea3d6
RT_CODE 2560 a5464b4862edf5afc327cdb27ad95db7
.rdata 343552 a8751be2d76a002d913eff3f72bd280b
.data 57856 d9a3006c5d29a3041904d08349e0789c
.pdata 72192 832a3f8234b1477f59eefacf137384cd
sflang_t 65536 ef989e6666ba7b917aa3630a6b009fe6
strings 566784 2e5adcf163f81d88d952ab21cc765027
strings2 7680 0e8edf14f1bb2936409cb96435cabea9
strings3 10240 ee47f7b45b71958f7b4227a3b1797076
strings4 18944 eb41191e632155d59367867cbc876215
.rsrc 1058304 bd4b8fe0654c3b91712127635abb3764

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information:

Download GridinSoft Anti-Malware - Removal tool for ApplicationRegistration.exe