» clientshutdown3.exe
Overview
Analysis
File Details

clientshutdown3.exe

Microsoft Visual Studio 2010

Microsoft Corporation

File name:

clientshutdown3.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft® Visual Studio® 2010

Description:

VSD connection manager client shutdown agent

Version:

10.1.40219.209 built by: WPDTRTMRel

MD5:

418f3e40b72b3b4b6d772d2b5b6a62e7

SHA-1:

2170620dea82d640c9c3db1dfa566ae220f8108b

SHA-256:

2d043b5691c8fa557dd3bd78fa8fc344952366d7b1bf169d32177aa97f00ffea

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/25/2024 8:50:14 AM UTC (today)

File size:

24.1 KB (24,704 bytes)

Product version:

10.1.40219.209

Original file name:

clientshutdown3.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\common files\microsoft shared\phone tools\corecon\10.0\target\wce400\armv4i\clientshutdown3.exe

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

6/20/2011 5:32:50 PM

Valid to:

9/20/2012 5:32:50 PM

Subject:

CN=Microsoft Mobile Device VSD Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Mobile Device VSD PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6102DA4E000000000007

File PE Metadata

Compilation timestamp:

9/15/2011 7:13:31 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Linker version:

9.0

CTPH (ssdeep):

384:s83gaRZjBNbv78Fx292Rj1LM5AxAvDEo2FSpq5YCptpQWopWreYdHXXYf1lpBj10:1RtBFv7OxQ2RRBxgDEkq5Ymfi+3X0TVy

Entry address:

0x204C

Entry point:

F0, 40, 2D, E9, 03, 40, A0, E1, 02, 50, A0, E1, 01, 60, A0, E1, 00, 70, A0, E1, 3B, FF, FF, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, F0, 40, BD, E8, D3, FF, FF, EA, 04, C0, 9F, E5, 00, C0, 9C, E5, 1C, FF, 2F, E1, 00, 50, 01, 00, 04, C0, 9F, E5, 00, C0, 9C, E5, 1C, FF, 2F, E1, 04, 50, 01, 00, 04, E0, 2D, E5, 00, 30, 92, E5, 01, 00, 13, E3, 03, E0, A0, E1, 04, 30, 92, 15, 08, 20, 92, 15, 1F, E0, C1, E7, 00, 10, 83, 10, 00, 30, 62, 12, 01, 30, 03, 10, 01, 30, 43, 10, 00, 00, 83, 10... 
[+]

Entropy:

6.2044

Code size:

11 KB (11,264 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.