unregmp2.exe
by Microsoft
Media
Summary
Windows Media Player Registration - manages Windows Media Player file associations and registration.
unregmp2.exe is the 1162nd most commonly executed Windows program in EchoTrail's dataset, observed 1,437 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by explorer.exe.
1162nd
most commonly executed Windows program
1,437
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System3295.34%
- C:\Windows\SysWOW644.66%
Top Hashes (SHA256)
- c662fad11c09a755158cc872ad69da8c2cdd9f00d4d1f54d118111047c7f800128.83%
- dc8fe6b88995040e6782f5d6123d206291ef17bd94ba9a0852b3951f8f1fa43811.3%
- 2a38bfc3813d7e845f455b31df099c8a6e657ef4556bff681315f86a883a331410.34%
- 21f41fea24dddc8a32f902af7b0387a53a745013429d8fd3f5fa6916eadc839d8.58%
- df160aced402899269a07872038e7cebe64cbb24dd09d8a4474b12aa6f7606537.78%
- 8b9ecd5fa290a630f13e016f37a8f45f493b0de67a85cd11c86580c8861bdd217.34%
- 59d8d6f5006d4c5b0f78a3fba78741358c4865ce686d01365a918ebcba0a51ef6.38%
- 6191b249973383a4eb23708ee2d882895968bb010b984e3b2095781ea4852c595.36%
- 4a86617eb2f7335803362868e2230a51306e3a0b47986b46b0564e6a5896d71f4.26%
- 7d6be433ba7dd4a2b8f8b79d7b87055da8daafa3e0404432d40469c39c2040e11.91%
Process Ancestry
Top Grandparents
- userinit.exe79.09%
- explorer.exe5.28%
- wmplayer.exe5.08%
- rdpshell.exe3.86%
- svchost.exe2.13%
- runonce.exe2.03%
- setup_wm.exe1.62%
- OpenWith.exe0.41%
- chrome.exe0.2%
- OUTLOOK.EXE0.1%
Top Parents
- explorer.exe82.56%
- unregmp2.exe10.01%
- wmplayer.exe2.99%
- runonce.exe2.64%
- setup_wm.exe1.81%
Top Children
- unregmp2.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about unregmp2.exe
Rocky answers questions about unregmp2.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.