» DEVICE~1.005
Overview
Analysis
File Details

DEVICE~1.005

SOTI Inc.

File name:

DEVICE~1.005

Publisher:

SOTI Inc. (signed and verified)

MD5:

801ca40f929bbc51d2a71bb945e285ff

SHA-1:

6fc9b79e972bf4d34e9a07edf84e45215d490372

SHA-256:

350028891aea329c200c3356dd24b949ad8e17b3cda49731a6e7da3b743db9fb

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/29/2024 8:44:03 AM UTC (today)

File size:

214.3 KB (219,464 bytes)

Common path:

C:\windows\temp\fcab137e-6d69-43e0-b4f2-3b0c4d59cf30\cabcontent\device~1.005

Digital Signature

Signed by:

SOTI Inc.

Authority:

Microsoft Corporation

Valid from:

2/11/2016 7:47:32 PM

Valid to:

2/10/2026 8:24:40 PM

Subject:

CN=CodeSigning for SOTI Inc., OU=Microsoft Privileged, O=SOTI Inc., L=Mississauga, S=Ontario, C=CA

Issuer:

CN=VeriSign Authorized Code Signing (Privileged) CA for Microsoft, O=Microsoft Corporation, C=US

Serial number:

484C

File PE Metadata

Compilation timestamp:

2/12/2016 10:12:54 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Linker version:

9.0

CTPH (ssdeep):

3072:JEA83rvp+yfAcfiUCA9vC1FWXvNprdDa4SGQQpFBCp+5S170/bGg6tiJM:JEL+yY6DCS6FaZlSRQrBC+4fJtiJM

Entry address:

0x21E60

Entry point:

F0, 41, 2D, E9, 02, 70, A0, E1, 01, 60, A0, E1, 00, 80, A0, E1, 7C, 50, 9F, E5, 01, 00, 56, E3, 08, 00, 00, 1A, 00, 30, 95, E5, 00, 00, 53, E3, 04, 00, 00, 0A, 01, 10, A0, E3, 0F, E0, A0, E1, 13, FF, 2F, E1, 00, 40, B0, E1, 12, 00, 00, 0A, 5E, 00, 00, EB, 07, 20, A0, E1, 06, 10, A0, E1, 08, 00, A0, E1, 64, E8, FF, EB, 00, 40, A0, E1, 00, 00, 56, E3, 0A, 00, 00, 1A, B2, 00, 00, EB, 00, 30, 95, E5, 00, 00, 53, E3, 06, 00, 00, 0A, 07, 20, A0, E1, 00, 10, A0, E3, 08, 00, A0, E1, 0F, E0, A0, E1, 13, FF, 2F, E1... 
[+]

Entropy:

5.7590

Code size:

145.5 KB (148,992 bytes)

Scan DEVICE~1.005 - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.