home

edellrootcertfix.exe

DFSCertUninstall

Dell USA L.P.

Publisher:
Microsoft  (signed by Dell USA L.P.)

Product:
DFSCertUninstall

Version:
1.0.0.0

MD5:
566c39f806bbee19383f2e9b82ea4647

SHA-1:
415ea219398c8e302fc21e94acb472dd11ef2e60

SHA-256:
211ecb60bdd1ee3dc8a870d04dd7851b7a8f1a2c5bcbb6b9bb4a739dc95d667f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:48:53 PM UTC  (today)

File size:
16.4 KB (16,800 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Microsoft 2015

Original file name:
eDell.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\edellrootcertfix.exe

Digital Signature
Signed by:
Dell USA L.P.

Authority:
Verizon Enterprise Solutions

Valid from:
10/23/2015 2:22:42 PM

Valid to:
10/23/2016 2:22:39 PM

Subject:
CN=Dell Inc., O=Dell USA L.P., L=Round Rock, S=TX, C=US

Issuer:
CN=Verizon Public SureCodeSign CA G14-SHA2, OU=Cybertrust, O=Verizon Enterprise Solutions, L=Amsterdam, C=NL

Serial number:
710E0A11DD84784D9B7A615197BD1E57C87E5A99

File PE Metadata
Compilation timestamp:
11/23/2015 7:56:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:R5Dr9ig/nbF8mQaKVWd1RIDZwnk6LRTZZpixkYIDR03GAeQobFSyO:7r9ienh8moWd1eDZ5AtQxYRGO8L

Entry address:
0x349E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0429

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
5.5 KB (5,632 bytes)

The file edellrootcertfix.exe has been seen being distributed by the following 4 URLs.

http://lt.dell.com/lt/lt.aspx?CID=293476&LID=5618642&DGC=BA&DGSeg=SOHO&ACD=12309217690294297&http://pubads.g.doubleclick.net/gampad/clk?id=128356616&iu=/8456&DURL=https://dellupdater.dell.com/Downloads/.../eDellRootCertFix.exe&VEN3=874703062846871181

http://api.viglink.com/api/click?format=go&jsonp=vglnk_14483977690639&key=2b0adaafa9ad8a29fede7758fada1730&libId=ihdujrs5010000ws000DLa6ewn549&loc=http://www.pcworld.com/article/3008452/security/what-you-need-to-know-about-dells-root-certificate-security-debacle.html&v=1&out=https://dellupdater.dell.com/Downloads/APP009/eDellRootCertFix.exe&ref=https://.../&title=Dell's security-shattering PC root certificate debacle: What you need to know | PCWorld&txt=a removal tool

https://dellupdater.dell.com/Downloads/.../eDellRootCertFix.exe

http://dl.cdn.chip.de/downloads/.../eDellRootCertFix.exe

Scan edellrootcertfix.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.