ApplyTrustOffline.exe

  • File Path: C:\Windows\system32\ApplyTrustOffline.exe
  • Description: “ApplyTrustOffline.PROGRAM”

Hashes

Type Hash
MD5 9B9A38FA70D9DD0ED975170938077744
SHA1 8059281FCFF2638405B7FC320D7CD86171F40CD9
SHA256 3A68D7E8C0D380C98C6ADB36EA1633CEDC7F07D43ECDAB3D3BCCBC8B062E2A27
SHA384 50D8FC2A5BAE67BAD55B233D7CEAD014125386A5D588ABD9EC0182DEA80723F28EB8120FC6E1E591114B0D64FF9E90EE
SHA512 9539D481FE9FFBB6D3B526B022CA4D482478F8DB491EE082A7780DFF1DC31FF0A23040863325D7C2F30517B466AA66C30D9669E0DF35057241C0F218E469CB1F
SSDEEP 12288:ko16kmdy3Gu9JpHW8PMJcatIWywlUV51BF5r24MLbekgfAch+I:k86k0qHHXHwI6UV51r5mmkrchf
IMP 76B11698645386AFEE2F4A2A8DB4EF06
PESHA1 93FBA57B1E42380336FBD931116C381B915D8D58
PE256 B964E37189AB750EF61DDB1673AF162BEF9E6E926788B351D2E5E3B3EEA06A25

Runtime Data

Loaded Modules:

Path
C:\Windows\system32\ApplyTrustOffline.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: “ApplyTrustOffline.PROGRAM”
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.610 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.610
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/3a68d7e8c0d380c98c6adb36ea1633cedc7f07d43ecdab3d3bccbc8b062e2a27/detection

MIT License. Copyright (c) 2020-2021 Strontic.