home

DDNIUser.EXE

DDNIUser Application

Digital Delivery Networks Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DDNIUser’.
Publisher:
Digital Delivery Networks, Inc.  (signed by Digital Delivery Networks Inc)

Product:
DDNIUser Application

Description:
DIBS User Account

Version:
1, 0, 0, 2

MD5:
0f1bcc0e9053de6b623e99b70d03f158

SHA-1:
eb8a35774113dd6d924cbcb6edc08943b0ef45de

SHA-256:
d50b181c4e9481c2979d5ed65cfe669d965a38572f619531b504646e49662e61

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 2:51:26 PM UTC  (today)

File size:
222.5 KB (227,816 bytes)

Product version:
1, 0, 0, 2

Copyright:
2006, Digital Delivery Networks, Inc.

Original file name:
DDNIUser.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ddni\sbits\ddniuser.exe

Digital Signature
Signed by:
Digital Delivery Networks Inc

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
10/1/2006 8:00:00 PM

Valid to:
10/2/2007 7:59:59 PM

Subject:
CN=Digital Delivery Networks Inc, OU=Secure Application Development, O=Digital Delivery Networks Inc, L=Scotts Valley, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
26C734C7842E30F5A16E817F30A95CA4

File PE Metadata
Compilation timestamp:
7/30/2007 5:07:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:bdwalGhX6RlMnrrKxGWdfPXFMEynUGi1tLo5Cgh99ptIxZH/NoNEbIIEDljIFS:RGqlMnrxWzMVn8KJps/jIIEJ

Entry address:
0x9A86

Entry point:
55, 8B, EC, 6A, FF, 68, 70, 65, 42, 00, 68, E0, D4, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, D0, 41, 42, 00, 33, D2, 8A, D4, 89, 15, 60, 31, 43, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 5C, 31, 43, 00, C1, E1, 08, 03, CA, 89, 0D, 58, 31, 43, 00, C1, E8, 10, A3, 54, 31, 43, 00, 6A, 01, E8, 96, 39, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 26, 2E, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
5.9173

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
140 KB (143,360 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DDNIUser

Command:
C:\Program Files\ddni\sbits\ddniuser.exe


Scan DDNIUser.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.