home

AgentUI.exe

UI

Sentinel Labs, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Sentinel Agent’.
Publisher:
Sentinel Labs, Inc.  (signed and verified)

Product:
UI

Version:
1.0.0.0

MD5:
512281524bd6f077dca618fbab671e55

SHA-1:
ed33dc2ab751f185bd688c5e6b03f45df983e132

SHA-256:
b6d068e20b2de7b369420b25ca68d2b239748d4e5d0673d2eb02e0e09d9070ea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:21:14 PM UTC  (today)

File size:
937.6 KB (960,120 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
AgentUI.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\sentinelone\sentinel agent 1.6.2519.0\agentui.exe

Digital Signature
Signed by:
Sentinel Labs, Inc.

Authority:
DigiCert Inc

Valid from:
7/5/2015 2:00:00 AM

Valid to:
12/30/2015 1:00:00 PM

Subject:
CN="Sentinel Labs, Inc.", O="Sentinel Labs, Inc.", L=Palo Alto, S=California, C=US, PostalCode=94306, STREET=2500 El Camino Real, SERIALNUMBER=5278570, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
03292AD5BA34EFCC86534C31F725BB85

File PE Metadata
Compilation timestamp:
12/17/2015 1:03:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:EwClHstlZuAcGlCDxtp7zcdFgIFnMbAcdFgIFnM5:A70Fg6M9Fg6M5

Entry address:
0xB471E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
714 KB (731,136 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Sentinel Agent

Command:
C:\Program Files\sentinelone\sentinel agent 1.6.2519.0\agentui.exe


Scan AgentUI.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.