» 0mckiosk.007
Overview
Analysis
File Details

0mckiosk.007

SOTI MobiControl

SOTI Inc.

File name:

0mckiosk.007

Publisher:

SOTI Inc. (signed and verified)

Product:

SOTI MobiControl

Description:

MCKiosk

Version:

13.0.0

MD5:

d2590792dc20fa3ef267203c9d80a99b

SHA-1:

118051969de14e2a6f31000ade39d04e458ae472

SHA-256:

261b26fb55c239a618d254841c0e1d1b5a9952cc0a7a6776c9bc6a6b0565b562

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/29/2024 8:15:28 AM UTC (today)

File size:

501.3 KB (513,352 bytes)

Product version:

13.0.0

Original file name:

MCKiosk.exe

Language:

English (United States)

Common path:

C:\windows\temp\fcab137e-6d69-43e0-b4f2-3b0c4d59cf30\cabcontent\0mckiosk.007

Digital Signature

Signed by:

SOTI Inc.

Authority:

Microsoft Corporation

Valid from:

2/11/2016 7:47:32 PM

Valid to:

2/10/2026 8:24:40 PM

Subject:

CN=CodeSigning for SOTI Inc., OU=Microsoft Privileged, O=SOTI Inc., L=Mississauga, S=Ontario, C=CA

Issuer:

CN=VeriSign Authorized Code Signing (Privileged) CA for Microsoft, O=Microsoft Corporation, C=US

Serial number:

484C

File PE Metadata

Compilation timestamp:

2/12/2016 10:11:25 PM

OS version:

4.20

OS bitness:

Win32

Subsystem:

Linker version:

9.0

CTPH (ssdeep):

6144:Xyf7xLwTSR4wCYd7+hUn+DCjEvcbiSM7m5FIFnhslqFjfEfv8vDQr:if1HFvEU6Cjyckm56Zw+Pbs

Entry address:

0x5C898

Entry point:

0D, C0, A0, E1, F0, 58, 2D, E9, 1C, B0, 8D, E2, 04, D0, 4D, E2, 00, 70, A0, E1, 01, 60, A0, E1, 02, 50, A0, E1, 03, 40, A0, E1, 41, 00, 00, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, BA, 65, FF, EB, 00, 40, A0, E1, 20, 40, 0B, E5, 01, 00, 00, EA, 00, 40, A0, E1, 4F, 00, 00, EB, 04, 00, A0, E1, 4D, 00, 00, EB, F0, A8, 1B, E9, 04, E0, 2D, E5, 00, 10, A0, E1, 00, 00, 91, E5, 00, 00, 90, E5, 25, 05, 00, EB, 00, 80, BD, E8, F0, 40, 2D, E9, 00, 70, A0, E1, 90, 60, 9F, E5, 00, 00, 96, E5... 
[+]

Entropy:

5.5379

Code size:

390.5 KB (399,872 bytes)

Scan 0mckiosk.007 - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.