» pkctrlsv.004
Overview
Analysis
File Details

pkctrlsv.004

SOTI MobiControl

SOTI Inc.

File name:

pkctrlsv.004

Publisher:

SOTI Inc. (signed and verified)

Product:

SOTI MobiControl

Description:

PkCtrlSv DLL

Version:

13.0.0

MD5:

18c528694ec8324292a7531a0a19a666

SHA-1:

0b4ce01e6c067fbfd8cf2bbc42aec93221274df3

SHA-256:

884a02c6ed2cfd788f80340cdc6847e512f84cbc6625769490fcf101136263aa

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/29/2024 10:38:59 AM UTC (today)

File size:

852.3 KB (872,776 bytes)

Product version:

13.0.0

Original file name:

PkCtrlSv.DLL

Language:

English (United States)

Common path:

C:\windows\temp\fcab137e-6d69-43e0-b4f2-3b0c4d59cf30\cabcontent\pkctrlsv.004

Digital Signature

Signed by:

SOTI Inc.

Authority:

Microsoft Corporation

Valid from:

2/11/2016 7:47:32 PM

Valid to:

2/10/2026 8:24:40 PM

Subject:

CN=CodeSigning for SOTI Inc., OU=Microsoft Privileged, O=SOTI Inc., L=Mississauga, S=Ontario, C=CA

Issuer:

CN=VeriSign Authorized Code Signing (Privileged) CA for Microsoft, O=Microsoft Corporation, C=US

Serial number:

484C

File PE Metadata

Compilation timestamp:

2/12/2016 10:11:57 PM

OS version:

4.20

OS bitness:

Win32

Subsystem:

Linker version:

9.0

CTPH (ssdeep):

12288:BbvCUDpi++XC+bS9rWwxRbzv4JY9oECp9TlSP/L1ySwFyzP/vf89J:9CUDpqbwOYOEC9Tl0/L38ys

Entry address:

0x9ED58

Entry point:

F0, 41, 2D, E9, 00, 80, A0, E1, 01, 40, A0, E1, 02, 70, A0, E1, 78, 50, 9F, E5, 01, 00, 54, E3, 08, 00, 00, 1A, 00, 30, 95, E5, 00, 00, 53, E3, 04, 00, 00, 0A, 01, 10, A0, E3, 0F, E0, A0, E1, 03, F0, A0, E1, 00, 60, B0, E1, 12, 00, 00, 0A, 43, 00, 00, EB, 07, 20, A0, E1, 04, 10, A0, E1, 08, 00, A0, E1, 87, B5, FE, EB, 00, 60, A0, E1, 00, 00, 54, E3, 0A, 00, 00, 1A, 8B, 00, 00, EB, 00, 30, 95, E5, 00, 00, 53, E3, 06, 00, 00, 0A, 07, 20, A0, E1, 00, 10, A0, E3, 08, 00, A0, E1, 0F, E0, A0, E1, 03, F0, A0, E1... 
[+]

Entropy:

5.6906

Code size:

661.5 KB (677,376 bytes)

Scan pkctrlsv.004 - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.