home

dtt.exe

Lenovo (United States) Inc.

Publisher:
Lenovo (United States) Inc.  (signed and verified)

MD5:
7d925a13aa2e875c66672f46c3de368f

SHA-1:
854fbc3d387b59b1e0dc2a5c83ec30e3549fd108

SHA-256:
8942a434dcf8f33df08efdc04ee46b9597953d0618dd594c44e7f80db46bcbf4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 10:28:53 AM UTC  (today)

File size:
2.1 MB (2,234,248 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\lenovo\cloud tools\lcmt\dtt\x86\dtt.exe

Digital Signature
Signed by:
Lenovo (United States) Inc.

Authority:
GoDaddy.com, Inc.

Valid from:
8/28/2015 9:24:39 AM

Valid to:
8/28/2016 9:24:39 AM

Subject:
CN=Lenovo (United States) Inc., O=Lenovo (United States) Inc., L=Morrisville, S=North Carolina, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00C643CD1A529DB606

File PE Metadata
Compilation timestamp:
3/31/2016 9:39:46 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
14.0

CTPH (ssdeep):
24576:9DEelS/+we3XFuOG/HN9ehEqoJDN8a030db6NZVm3w1M3QFbmGVh6Nq4CSOaqYDF:A3OedD1QDvh6rCwEXFU651ZXKKSwViIm

Entry address:
0x1444ED

Entry point:
E8, 8A, 0A, 00, 00, E9, 7A, FE, FF, FF, 55, 8B, EC, 6A, 00, FF, 15, AC, 92, 5A, 00, FF, 75, 08, FF, 15, A8, 92, 5A, 00, 68, 09, 04, 00, C0, FF, 15, B8, 90, 5A, 00, 50, FF, 15, B0, 92, 5A, 00, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, C5, 0D, 00, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, 68, 1D, 61, 00, 89, 0D, 64, 1D, 61, 00, 89, 15, 60, 1D, 61, 00, 89, 1D, 5C, 1D, 61, 00, 89, 35, 58, 1D, 61, 00, 89, 3D, 54, 1D, 61, 00, 66, 8C, 15, 80, 1D, 61, 00, 66, 8C, 0D, 74, 1D, 61, 00, 66, 8C, 1D, 50...
 
[+]

Entropy:
6.5500

Code size:
1.7 MB (1,736,704 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.