home

wmsetup.exe

SOTI Inc.

This is a self-extracting archive and installer.
Publisher:
SOTI Inc.  (signed and verified)

MD5:
a72f73358d58e8c5d678fb8b40c03bde

SHA-1:
953d741f5402e4529345d5f7ab189715b8e1bc30

SHA-256:
9d578ce6fe6b73d0c76a2f0d4d494b285adcf43150be424091c55011fffc4b10

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 3:21:11 PM UTC  (today)

File size:
102.8 KB (105,288 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\{c3d9886d-256e-42b7-8026-8625e505c3c4}\files\wmsetup.exe

Digital Signature
Signed by:
SOTI Inc.

Authority:
Microsoft Corporation

Valid from:
12/1/2014 12:06:56 AM

Valid to:
11/29/2024 9:17:16 PM

Subject:
CN=CodeSigning for SOTI Inc., OU=Microsoft Privileged, O=SOTI Inc., L=Mississauga, S=Ontario, C=CA

Issuer:
CN=VeriSign Authorized Code Signing (Privileged) CA for Microsoft, O=Microsoft Corporation, C=US

Serial number:
45CE

File PE Metadata
Compilation timestamp:
12/2/2014 1:40:31 PM

OS version:
4.20

OS bitness:
Win32

Subsystem:

Linker version:
9.0

CTPH (ssdeep):
1536:kVnuXixRC6WWgPMdONIHobIozsG2Gh8+AKQkWs9hh4QzAg4zVFDxq4WgZoVULvb4:SRbdzaJ/kDxq4WgZoVULTFi7

Entry address:
0xEB04

Entry point:
0D, C0, A0, E1, F0, 58, 2D, E9, 1C, B0, 8D, E2, 04, D0, 4D, E2, 03, 40, A0, E1, 02, 50, A0, E1, 01, 60, A0, E1, 00, 70, A0, E1, 5C, 00, 00, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, 43, C9, FF, EB, 00, 40, A0, E1, 20, 40, 0B, E5, 01, 00, 00, EA, 00, 40, A0, E1, AE, 00, 00, EB, 04, 00, A0, E1, AC, 00, 00, EB, F0, 68, 1B, E9, 1E, FF, 2F, E1, 04, E0, 2D, E5, 00, 30, 90, E5, 00, 10, A0, E1, 00, 00, 93, E5, AC, 05, 00, EB, 04, F0, 9D, E4, 70, 40, 2D, E9, 00, 40, A0, E1, 98, 50, 9F, E5...
 
[+]

Code size:
66 KB (67,584 bytes)

Scan wmsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.