dfrgui.exe

  • File Path: C:\Windows\SysWOW64\dfrgui.exe
  • Description: Microsoft Drive Optimizer

Screenshot

dfrgui.exe

Hashes

Type Hash
MD5 7023EC5BAEF3BDE3C77C0FA08D924501
SHA1 A15115AF3640B1C1DF4221E25513685A618916B5
SHA256 8B74F00EB983DC749438861AC524955D7241633B6973778BBEE73D9904304705
SHA384 1DD56080B0ACFD88AB48D5B2A9FFF67104B9EE1F9ABA1137CE3D76E5E7532F207A801B47907E630DDB63685881CB8FC4
SHA512 3B7E7D48CB95967495B77A8D02C57DF0406BDC0E99784F54E8F3A8E204E254D14D0FC3351F5AC2521312589D725E7F1B27371F55541531B5A91960E647285742
SSDEEP 12288:1hWgnZ6Kb8Xd3lRkRc4YFwjsWOfRg6gtPbcTTn7qxerx7:HQsWd3/kRc4l6g6gtPbcHn7q
IMP B72A9DEF4CB346F15A8F458293B62F22
PESHA1 1EB91FCF1A1BCE267C56977024626D5F76CE4F9B
PE256 3B85420076CB3A9D8468DB56F7EDB062B4720E8F4E6A015E2735535CD5809444

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\dfrgui.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: lhdfrgui.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1039 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1039
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/8b74f00eb983dc749438861ac524955d7241633b6973778bbee73d9904304705/detection/

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\Defrag.exe 43
C:\Windows\system32\dfrgui.exe 86
C:\windows\system32\dfrgui.exe 86
C:\Windows\system32\dfrgui.exe 86
C:\Windows\system32\shwebsvc.dll 50
C:\windows\SysWOW64\dfrgui.exe 79
C:\Windows\SysWOW64\dfrgui.exe 80
C:\Windows\SysWOW64\shwebsvc.dll 47

MIT License. Copyright (c) 2020-2021 Strontic.