Hi,
we use TIE 3.0. I want to know how the final reputation is calculated?
Some example: we have an unknown file. so I ran getclean tool and after a period of time. the GTI reputation changes from unknown to trusted. But the final reputation in TIE is still unknown.
So I want to know why and what I should do in this case?
Here is an example:
The file has a GTI reputation and the last applied rule is also set, but the reputation is unknown.
File metadata | |
All File Names | MICROSOFT.RIGHTSMANAGEMENTSERVICES.SERVERMANAGER.DEPLOYMENTPLUGIN.NI.DLL |
All File paths | C:\WINDOWS\ASSEMBLY\NATIVEIMAGES_V4.0.30319_64\MICROSOFT.R251A4777#\574E47FCDBBE0735FCEBBAC5DA963D94\MICROSOFT.RIGHTSMANAGEMENTSERVICES.SERVERMANAGER.DEPLOYMENTPLUGIN.NI.DLL |
Company Name | Microsoft Corporation |
Product Name | Microsoft (R) Windows (R) Operating System |
File Version | 10.0.17132.1 |
File Type | Windows Dynamic Library |
Latest Applied Rule | 138 v4 - Identify trusted unsigned Microsoft DOTNet assemblies |
SHA-1 Hash | 7F1AD3E0D9E215A371D436858125969CC0E8FB2D |
MD5 Hash | 4554A35D00D1A86F97A3286C4A0081A2 |
SHA-256 Hash | 38EB6BB860E3007332D0301C1C6A1E53C28D5EEBD20D1399C5EE9B009EDE22B9 |
Certificate SHA-1 Hash | Not Available |
Enterprise count | 4 |
First contact | 2/14/19 4:12:25 AM |
Last update | 3/27/19 7:17:16 AM |
Last access | 4/15/19 9:21:46 AM |
Latest Local Reputation Date | Not Available |
File Name count | 1 |
File Path count | 1 |
File Size | 1.84 MB |
Signed Bits Hash | 0 |
Last Detection name |
|
Detection count | 0 |
Children count | 0 |
Priority | Not Available |
First Agent |
|
File reputations | |
Composite Reputation | Unknown (Latest Local) |
Latest Local Reputation | Unknown |
Certificate Enterprise Reputation | Not Available |
Enterprise Reputation | Not Set |
Enterprise Reputation Last Refresh | 2/14/19 4:12:25 AM |
Comment |
|
Certificate GTI Reputation | Not Available |
GTI Reputation | Known Trusted |
GTI Reputation Last Refresh | 2/17/20 3:32:51 PM |
ATD Reputation | Not Available |
ATD Reputation Last Refresh | Not Available |
MWG Reputation | Not Available |
MWG Reputation Last Refresh | Not Available |
External Reputation | Not Available |
External Reputation Last Refresh | Not Available |
Local Reputation minimum | Unknown |
Local Reputation maximum | Most Likely Trusted |
Local Reputation average | 78 |
Local Reputation count | 5 |
Pre-Prompt Reputation minimum | Not Set |
Pre-Prompt Reputation maximum | Not Set |
Pre-Prompt Reputation average | 0 |
Parent Reputation minimum | Not Set |
Parent Reputation maximum | Not Set |
Parent Reputation average | 0 |
File Parents | Not Available |
Good Reputation count | 0 |
Bad Reputation count | 0 |
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA