» ntouchpc.devices.dll
Overview
Analysis
File Details

ntouchpc.devices.dll

Sorenson Communications, Inc. Copyright © 2014

Sorenson Communications, Inc.

File name:

Publisher:

Sorenson Communications, Inc. (signed and verified)

Product:

Version:

4.5.0.248

MD5:

41aa0cdcc38b38d51bf3fd1e8c20d818

SHA-1:

ce2584fa3b160279341e99bbd0c7d400ea9b13c7

SHA-256:

fdcad104bbf22ee3d31f194617c33f059c6555277eebaf0966d69091e8bf9e66

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

7/4/2025 1:03:54 PM UTC (today)

Scan engine

Detection

Engine version

AegisLab AV Signature

Troj.W32.Regrun

2.1.4+

File size:

405.3 KB (415,032 bytes)

Product version:

4.5.0.248

Original file name:

ntouchPC.Devices

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\sorenson\ntouch pc\application\ntouchpc.devices.dll

Digital Signature

Signed by:

Sorenson Communications, Inc.

Authority:

DigiCert Inc

Valid from:

6/3/2015 5:00:00 PM

Valid to:

6/5/2018 5:00:00 AM

Subject:

CN="Sorenson Communications, Inc.", O="Sorenson Communications, Inc.", L=Salt Lake City, S=Utah, C=US

Issuer:

CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

02802247B08F17BB822D2694A37F16D0

File PE Metadata

Compilation timestamp:

11/9/2015 10:06:13 AM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

6144:VFtDG6gw00mcgRVo0rdChDJcMgb4DAWMQnp9YdA7oAMDpbiIpOSUvAhtmypI0nw4:ovroOj7y9AIo

Entry address:

0x192FC

Entry point:

FF, 25, 18, A2, 01, 10, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4D, F0, E9, E8, 42, FF, FF, 8B, 4D, F0, 83, C1, 34, E9, BD, CF, FF, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, EC, 33, C8, E8, 7E, DE, FF, FF, B8, 48, E2, 05, 10, E9, 84, DE, FF, FF, CC, CC, 8B, 4D, F0, E9, B8, 42, FF, FF, 8B, 4D, F0, 83, C1, 34, E9, 8D, CF, FF, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, EC, 33, C8, E8, 4E, DE, FF, FF, B8, 14, E2, 05, 10, E9, 54, DE, FF, FF, CC, CC, 8B, 4D, F0, E9, 98, 3F, FF, FF, 8B, 4D, F0, 81... 
[+]

Entropy:

6.7777

Code size:

100 KB (102,400 bytes)

Scan ntouchpc.devices.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.