home

AgentUI.exe

UI

Sentinel Labs, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Sentinel Agent’.
Publisher:
Sentinel Labs, Inc.  (signed and verified)

Product:
UI

Version:
1.0.0.0

MD5:
8335291edd833adc806bc18b2a92bb9d

SHA-1:
fa2e1970c5c465756e1efc6adfe5455fd59da15f

SHA-256:
296f644ceb2a884e82c9ec3e4fb7bacfdde73983f64bc3eb83345b03f0b6bb61

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 4:51:02 PM UTC  (today)

File size:
941.1 KB (963,704 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
AgentUI.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\sentinelone\sentinel agent 1.6.2008.0\agentui.exe

Digital Signature
Signed by:
Sentinel Labs, Inc.

Authority:
DigiCert Inc

Valid from:
7/5/2015 3:00:00 AM

Valid to:
12/30/2015 2:00:00 PM

Subject:
CN="Sentinel Labs, Inc.", O="Sentinel Labs, Inc.", L=Palo Alto, S=California, C=US, PostalCode=94306, STREET=2500 El Camino Real, SERIALNUMBER=5278570, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
03292AD5BA34EFCC86534C31F725BB85

File PE Metadata
Compilation timestamp:
11/10/2015 2:00:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:fwClHstlZuAcGlCDxtp7zcdFgIFnMZgcdFgIFnMx:970Fg6MjFg6Mx

Entry address:
0xB55CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 78, 00, 00, 80, 10, 00, 00, 00, 90, 00, 00, 80, 18, 00, 00, 00, A8, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 07, 00, 02, 00, 00, 00, C0, 00, 00, 80, 03, 00, 00, 00, D8, 00...
 
[+]

Entropy:
7.0499

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
717.5 KB (734,720 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Sentinel Agent

Command:
C:\Program Files\sentinelone\sentinel agent 1.6.2008.0\agentui.exe


Scan AgentUI.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.