ApplyTrustOffline.exe

  • File Path: C:\Windows\system32\ApplyTrustOffline.exe
  • Description: “ApplyTrustOffline.PROGRAM”

Hashes

Type Hash
MD5 74CF92E6BF88017EC81945F8505ED984
SHA1 3E953A2208592683A0053A3849F9BFB80FB4C9E9
SHA256 1A295B076E12948D7CF3D6EA37149A247E2B43AADF6E7BF5EEDC985F07EA0B5A
SHA384 9556A1835E432449482441499A664CC7BFE08641A6853490038AE6CE2F0250FBC777D0B26AAB3128A7F3236DFBB6937F
SHA512 D45D3F512582ABF74722B8F1AC949B6B5289B6BC9D4E2D346812F9FE056E80B8C59DD517D8F50CD02A50CF7E21CE83A7750B89E383F6C9CD7A6672D7DF89FBB6
SSDEEP 12288:R+R0f2Z5zkcpfXqgISVpTaqXW9vXlVT1xKR4KrHG2RUYCEDyAQPxjsuk:PfGSMygvXaXlVJERRxRSEDyAYiuk
IMP E30F70DCDF384E0C35F45016B9B2DC2C
PESHA1 4D8A73B2F654F3670BC393B64E683091531E38B7
PE256 AD5F51A5785AEED476C32559871A3B410692ACF265650A000D07092C0F4EB870

Runtime Data

Loaded Modules:

Path
C:\Windows\system32\ApplyTrustOffline.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: “ApplyTrustOffline.PROGRAM”
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1320 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1320
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/1a295b076e12948d7cf3d6ea37149a247e2b43aadf6e7bf5eedc985f07ea0b5a/detection

MIT License. Copyright (c) 2020-2021 Strontic.