home

semaphore-threads.exe

CNG key isolation service

DesignerWare, LLC

Publisher:
Microsoft Corporation  (signed by DesignerWare, LLC)

Product:
Microsoft® Windows® Operating System

Description:
CNG key isolation service

Version:
6.1.5374.27941

MD5:
706bd6a4c0a4617e2dd33ab1f5472672

SHA-1:
a97322f15bbb9fe062413c5663b157b4aa464e25

SHA-256:
f15da59019e923615b9f962c3a843c479933c416ee5590af8dbd3722427a828f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 8:34:32 AM UTC  (today)

File size:
470.6 KB (481,904 bytes)

Product version:
6.1.5374.27941

Copyright:
©Microsoft Corporation Copyright © 2010

Trademarks:
Windows®

Original file name:
NETCommando.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Windows\System32\semaphore-threads.exe

Digital Signature
Signed by:
DesignerWare, LLC

Authority:
GlobalSign nv-sa

Valid from:
10/30/2013 1:35:43 PM

Valid to:
12/30/2014 10:00:24 PM

Subject:
CN="DesignerWare, LLC", OU=Anti-theft Software, O="DesignerWare, LLC", L=North East, S=PA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112159641C408B518891B191C1FBB8AF13CB

File PE Metadata
Compilation timestamp:
9/18/2014 3:32:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:RugnasGQs+jm7nCfOkfjKh7OErDIAFMbD+tIT3F3msN7fyCSXe2nsiGn0xjCAsh+:day1CS4R6jCSqvluIjPkZv/y

Entry address:
0x663BE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 65, 41, 1B, 54, 00, 00, 00, 00, 02, 00, 00, 00, 4F, 00, 00, 00, 1C, 80, 06, 00, 1C, 48, 06, 00, 52, 53, 44, 53, 8B, A5, 10, B3, 33, 69, 20, 48, 92, 09, D8, 3C, 4C, BF, 93, DD, 01, 00, 00, 00, 43, 3A, 5C, 54, 72, 69, 4C, 6F, 63, 6B...
 
[+]

Entropy:
6.2218

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
401 KB (410,624 bytes)

Scan semaphore-threads.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.