home

topoedit.exe

Media Foundation Topology Editor

Microsoft Corporation

Publisher:
Microsoft  (signed by Microsoft Corporation)

Product:
Media Foundation Topology Editor

Description:
Topology Editor

Version:
1.0.0.1

MD5:
bb9c83a5d396c1ae3423f050ff41c1cd

SHA-1:
8a2780abe45dae480a00596b6e672d2ed5ac76e1

SHA-256:
e45d0eb0e6f80b33acd8cc14b5ccb0b5f63635b4ee8cdb071bc97c03a0044e4a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 12:15:28 AM UTC  (today)

File size:
157.5 KB (161,256 bytes)

Product version:
1.0.0.1

Copyright:
(c) Microsoft. All rights reserved.

Original file name:
topoedit.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\windows kits\8.1\bin\arm\topoedit.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/10/2014 2:35:36 AM

Valid to:
4/10/2015 2:35:36 AM

Subject:
CN=Microsoft Windows Kits Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000415EAA1AAB49804ABD000000000041

File PE Metadata
Compilation timestamp:
10/25/2014 7:56:00 AM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1536:htCl9g562R2hoYYrvm/LmDD+ft5jLgffjhVY+Hc3xN4ydP8VES43BJELvk:ewRfeDY+6njTT6U143BJUk

Entry address:
0x137A9

Entry point:
E9, 00, 48, EB, 46, 00, F0, DB, F9, FF, F7, 9B, FE, BD, E8, 00, 88, 00, 00, 47, F2, 4C, 2C, C0, F2, 41, 0C, DC, F8, 00, F0, 47, F2, 50, 2C, C0, F2, 41, 0C, DC, F8, 00, F0, 47, F2, 54, 2C, C0, F2, 41, 0C, DC, F8, 00, F0, 47, F2, 58, 2C, C0, F2, 41, 0C, DC, F8, 00, F0, 2D, E9, 00, 48, EB, 46, DB, 69, 1B, 68, 23, F0, 03, 02, 50, 58, 13, F0, 01, 0F, 01, D0, 13, 1A, 58, 18, EF, F7, CF, FC, 01, 20, BD, E8, 00, 88, 47, F2, 5C, 2C, C0, F2, 41, 0C, DC, F8, 00, F0, 47, F2, 6C, 2C, C0, F2, 41, 0C, DC, F8, 00, F0, 47...
 
[+]

Entropy:
6.1666

Packer / compiler:
Xtreme-Protector v1.05

Code size:
78 KB (79,872 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.