home

EMA.Coordinator.exe

Carmel

Polycom

Publisher:
Polycom Inc.  (signed by Polycom)

Product:
Carmel

Description:
EMA Application Coordinator

Version:
8.1.7.21

MD5:
357b013d7112a92c431db93271b2e4c7

SHA-1:
786b42af4c3512afd24242a5fb85d7623768a143

SHA-256:
b4756cecd7708650e45590c90278168a3c618d7f6303586662996de6cb8063be

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 5:23:38 AM UTC  (today)

File size:
155.6 KB (159,344 bytes)

Product version:
8.1.7.21

Copyright:
Copyright(c) Polycom, Inc.

Original file name:
EMA.Coordinator.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\apps\2.0\2w4ezxw1.2kw\m31hnrn5.jcm\ema...ator_8616df06c3069922_0008.0001_none_c82e3c13334bc7f9\ema.coordinator.exe

Digital Signature
Signed by:
Polycom

Authority:
VeriSign, Inc.

Valid from:
11/29/2011 4:00:00 AM

Valid to:
1/19/2015 3:59:59 AM

Subject:
CN=Polycom, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Polycom, L=Westminster, S=Colorado, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4B16DD979BC4A569EE7BDDE59A5E5060

File PE Metadata
Compilation timestamp:
1/17/2014 10:59:34 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:PGTPkmyE45TK62QiOUv04Me/xolI0LsZqtt6F9szqyI2J:PGpUTK68OU8LlIxqtt6F9szqyIY

Entry address:
0x2461E

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.4435

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
140 KB (143,360 bytes)

Scan EMA.Coordinator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.