DellOptimizer[.]UI[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

DellOptimizer.UI.exe
Size

37.4MB
MD5

8155f0e89e6e6c1d76173e13de13deda
SHA1

87cbc6f943a58509c1ad5ab0cb6e3e35968a8184
SHA256

11d4440bc79c3b664c37d665e6256ea113135b32d0a3becf256e9286338876b7
SHA512

d8b0fbc7c87df87076868ef0bcecbb8e12a33fe5590502d4975bb0098eeef64c27b59d10e495d701e840a3dea69df3be7fb7134d2fc39d81905d58b053bb6ad3
SSDEEP

786432:l7/T6XOrszUiYupl0znQ+BvTCAYuGm9Sp2u6mmhL:l7LPwzJnpezQ0LCAZGm9S36mc

Score

1^/10

Malware Config

Signatures

Files

DellOptimizer.UI.exe
.exe windows:4 windows x64 arch:x64

Code Sign

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

07/05/2021, 15:43

Not After

07/11/2030, 16:13

Subject

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Certificate

Issuer

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

Not Before

07/05/2021, 19:19

Not After

29/12/2040, 23:59

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:5d:44:bd:f5:d1:e1:ba:89:25:f7:e8:2f:62:84:6c
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

Not Before

15/11/2021, 21:40

Not After

15/11/2022, 21:40

Subject

SERIALNUMBER=2141541,CN=Dell Inc,OU=Client Software,O=Dell Inc,L=Round Rock,ST=Texas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

38:63:de:f8
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

24/12/1999, 17:50

Not After

24/07/2029, 14:15

Subject

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

22/07/2015, 19:02

Not After

22/06/2029, 19:32

Subject

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4
Certificate

Issuer

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

22/07/2020, 15:33

Not After

29/12/2030, 16:29

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d9:79:87:58:a3:f6:a1:82:55:81:b2:38:f4:c9:21:ab:4e:36:ad:75:47:91:63:0f:29:4b:33:f6:95:fb:1b:5e
Signer

Actual PE Digest

d9:79:87:58:a3:f6:a1:82:55:81:b2:38:f4:c9:21:ab:4e:36:ad:75:47:91:63:0f:29:4b:33:f6:95:fb:1b:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\jenkins_abacus\workspace\DO-Prod-App\Source\UI\DellOptimizer.UI\obj\x64\Release\DellOptimizer.UI.pdb

Sections

.text
Size: 37.4MB - Virtual size: 37.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7fCertificate

Extended Key Usages

Key Usages

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2bCertificate

Extended Key Usages

Key Usages

1b:5d:44:bd:f5:d1:e1:ba:89:25:f7:e8:2f:62:84:6cCertificate

Extended Key Usages

Key Usages

38:63:de:f8Certificate

Key Usages

58:da:13:ff:00:00:00:00:51:ce:0d:f7Certificate

Extended Key Usages

Key Usages

8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4Certificate

Extended Key Usages

Key Usages

d9:79:87:58:a3:f6:a1:82:55:81:b2:38:f4:c9:21:ab:4e:36:ad:75:47:91:63:0f:29:4b:33:f6:95:fb:1b:5eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 37.4MB - Virtual size: 37.4MB

.rsrc Size: 4KB - Virtual size: 4KB

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Certificate

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Certificate

1b:5d:44:bd:f5:d1:e1:ba:89:25:f7:e8:2f:62:84:6c
Certificate

38:63:de:f8
Certificate

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4
Certificate

d9:79:87:58:a3:f6:a1:82:55:81:b2:38:f4:c9:21:ab:4e:36:ad:75:47:91:63:0f:29:4b:33:f6:95:fb:1b:5e
Signer

.text
Size: 37.4MB - Virtual size: 37.4MB

.rsrc
Size: 4KB - Virtual size: 4KB