» edm3.exe
Overview
Analysis
File Details

edm3.exe

Microsoft Visual Studio 2010

Microsoft Corporation

File name:

edm3.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft® Visual Studio® 2010

Description:

VSD RPC Surrogate

Version:

10.1.40219.166 built by: WPDTRTMRel

MD5:

900458b343d0f4ceb1328476735b18b3

SHA-1:

5f29291baed182906733a0c96bbb385a96600efb

SHA-256:

205897839806da8e58170d7ec0b1c05e53dec91b44985495c0bf4f313573ffc6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/23/2024 2:43:59 PM UTC (today)

File size:

224.6 KB (229,992 bytes)

Product version:

10.1.40219.166

Original file name:

conmansurrogate.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\microsoft visual studio 10.0\smartdevices\debugger\target\wce400\armv4i\edm3.exe

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

6/21/2011 12:32:50 AM

Valid to:

9/21/2012 12:32:50 AM

Subject:

CN=Microsoft Mobile Device VSD Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Mobile Device VSD PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6102DA4E000000000007

File PE Metadata

Compilation timestamp:

8/3/2011 7:51:13 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Linker version:

9.0

CTPH (ssdeep):

6144:AwYDH7NKNudxj/8uMvY0lkpvbgH36DoeeiL9:sUlkyH3YoeVL9

Entry address:

0x9D80

Entry point:

F0, 40, 2D, E9, 03, 40, A0, E1, 02, 50, A0, E1, 01, 60, A0, E1, 00, 70, A0, E1, 3B, FF, FF, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, F0, 40, BD, E8, D3, FF, FF, EA, 04, C0, 9F, E5, 00, C0, 9C, E5, 1C, FF, 2F, E1, 20, 31, 04, 00, 04, C0, 9F, E5, 00, C0, 9C, E5, 1C, FF, 2F, E1, 90, 30, 04, 00, 04, C0, 9F, E5, 00, C0, 9C, E5, 1C, FF, 2F, E1, 08, 30, 04, 00, 04, C0, 9F, E5, 00, C0, 9C, E5, 1C, FF, 2F, E1, 0C, 30, 04, 00, 04, C0, 9F, E5, 00, C0, 9C, E5, 1C, FF, 2F, E1, 10, 30, 04, 00... 
[+]

Entropy:

6.1144

Code size:

168 KB (172,032 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.