» jetbrains.etw.collector.exe
Overview
Analysis
File Details

jetbrains.etw.collector.exe

JetBrains ETW Collector

JetBrains s.r.o.

File name:

Publisher:

JetBrains s.r.o (signed by JetBrains s.r.o.)

Product:

JetBrains ETW Collector

Version:

1.1.16408.35091

MD5:

755add9f512d86e07f7d200acabe416e

SHA-1:

b8cee52e20444ad1364d2f9a1107f1b33f403b91

SHA-256:

e684fc6dca6247429992e192a46182de2cce63a3f1f2fe21fd9868b2c42cce02

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 3:24:11 AM UTC (today)

File size:

12 MB (12,635,248 bytes)

Product version:

1.1.16408.35091

File type:

Executable application (Win64 EXE)

Common path:

C:\users\{user}\appdata\local\jetbrains\installations\dottrace01\x64.dbg\jetbrains.etw.collector.exe

Digital Signature

Signed by:

JetBrains s.r.o.

Authority:

Thawte, Inc.

Valid from:

9/17/2013 3:00:00 AM

Valid to:

11/8/2015 2:59:59 AM

Subject:

CN=JetBrains s.r.o., OU=SOFTWARE, O=JetBrains s.r.o., L=Praha 4, S=Czech Republic, C=CZ

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

4C197955399C88E2681E883299AA2BFC

File PE Metadata

Compilation timestamp:

12/4/2014 10:36:08 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

12.0

CTPH (ssdeep):

98304:PdZzdE808UJtGg2aYn1g93/dUJpetDxXLspvCQ1:PdRdnZUzGx1qxXwpvCQ1

Entry address:

0x662100

Entry point:

48, 83, EC, 28, E8, E7, 0D, 06, 00, E8, D2, FD, FF, FF, 48, 83, C4, 28, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 89, 4C, 24, 08, 48, 83, EC, 38, 83, 7C, 24, 40, 00, 7C, 17, E8, DC, 10, 06, 00, 8B, 00, 39, 44, 24, 40, 7D, 0A, 8B, 44, 24, 40, 89, 44, 24, 20, EB, 0B, E8, C5, 10, 06, 00, 8B, 00, 89, 44, 24, 20, E8, AA, 10, 06, 00, 48, 63, 4C, 24, 20, 48, 8B, 04, C8, 48, 83, C4, 38, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 89, 4C, 24, 08, 48, 83, EC, 58, E8, D3, 5D, 02, 00, 48, 89, 44... 
[+]

Code size:

8.1 MB (8,536,576 bytes)

Scan jetbrains.etw.collector.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.