home

jetbrains.etw.collector.host.exe

JetBrains ETW Collector

JetBrains s.r.o.

Publisher:
JetBrains s.r.o  (signed by JetBrains s.r.o.)

Product:
JetBrains ETW Collector

Description:
JetBrains ETW Collector Host

Version:
1.1.4.0

MD5:
4f9dc5f300b729cbd3561e407db3e32f

SHA-1:
3e6d9af514ba75dc0f61fa6c304c0e43f41d5bfd

SHA-256:
d307f5a2d1afcd9c07746ec32dda9285930c4f472a9437d853fd4dbce14cd202

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:13:54 PM UTC  (today)

File size:
4.7 MB (4,884,088 bytes)

Product version:
1.1.4.0

Copyright:
Copyright ©2011-2014 JetBrains s.r.o. All rights reserved.

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\jetbrains\installations\dottrace01\x64.dbg\jetbrains.etw.collector.host.exe

Digital Signature
Signed by:
JetBrains s.r.o.

Authority:
Thawte, Inc.

Valid from:
9/17/2013 3:00:00 AM

Valid to:
11/8/2015 2:59:59 AM

Subject:
CN=JetBrains s.r.o., OU=SOFTWARE, O=JetBrains s.r.o., L=Praha 4, S=Czech Republic, C=CZ

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4C197955399C88E2681E883299AA2BFC

File PE Metadata
Compilation timestamp:
12/4/2014 10:35:46 PM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
49152:1jTe7sXfrhj8jh7ksIOJX5YsawnrakatA736XI4i8z9ydqx+4xieG:yjh71IM61mnDqxy

Entry address:
0x1E8D90

Entry point:
48, 83, EC, 28, E8, D7, 24, 04, 00, E8, D2, FD, FF, FF, 48, 83, C4, 28, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 89, 4C, 24, 08, 48, 83, EC, 28, 48, 63, 44, 24, 30, 48, 6B, C0, 10, 48, 8D, 0D, A8, DC, 25, 00, 48, 83, 3C, 01, 00, 75, 17, 8B, 4C, 24, 30, E8, 88, 01, 00, 00, 85, C0, 75, 0A, B9, 11, 00, 00, 00, E8, CA, A6, 02, 00, 48, 63, 44, 24, 30, 48, 6B, C0, 10, 48, 8D, 0D, 7A, DC, 25, 00, 48, 8B, 0C, 01, FF, 15, 18, 04, 14, 00, 48, 83, C4, 28, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC...
 
[+]

Code size:
3.2 MB (3,305,984 bytes)

Scan jetbrains.etw.collector.host.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.