» mem.sys
Overview
Analysis
File Details

mem.sys

Technology Pathways, LLC

File name:

mem.sys

Publisher:

Technology Pathways, LLC (signed and verified)

MD5:

26d621cb548a8d0a37e0947a591d3ecc

SHA-1:

f6e2dcab6b2a2b58d1e3eeb9dae383503d73fe47

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

7/7/2025 6:13:22 PM UTC (today)

File size:

9 KB (9,232 bytes)

File type:

Driver (Win32 SYS)

Common path:

C:\documents and settings\owner\downloads\dart v1\dart\apps\acquisition\image\prodiscover\mem.sys

Digital Signature

Signed by:

Technology Pathways, LLC

Authority:

Thawte, Inc.

Valid from:

12/29/2010 1:00:00 AM

Valid to:

1/27/2013 12:59:59 AM

Subject:

CN="Technology Pathways, LLC", OU=APPLICATION DEVELOPMENT, O="Technology Pathways, LLC", L=Coronado, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7679E726CEEE2BC166E745402E3471D6

File PE Metadata

Compilation timestamp:

8/18/2009 7:06:56 AM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

8.0

CTPH (ssdeep):

96:VQ34qE7FGok7UzYls+ansiPoHQjzQMLy+b2oB60oB6couRKEnlcv8M0zGZoB6pNx:VQYvkAwisyowJL/l0Fa8JGiou7+wWkc

Entry address:

0x985

Entry point:

8B, FF, 55, 8B, EC, A1, 00, 09, 01, 00, 85, C0, B9, 4E, E6, 40, BB, 74, 04, 3B, C1, 75, 1E, 8B, 15, 20, 08, 01, 00, B8, 00, 09, 01, 00, C1, E8, 08, 33, 02, A3, 00, 09, 01, 00, 75, 07, 8B, C1, A3, 00, 09, 01, 00, F7, D0, A3, 04, 09, 01, 00, 5D, E9, 13, FC, FF, FF, CC, F0, 09, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, D8, 0A, 00, 00, 00, 08, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 1C, 0A, 00, 00, 32, 0A, 00, 00, 3E, 0A, 00, 00, 4E, 0A, 00, 00, 66, 0A, 00, 00, 78... 
[+]

Code size:

1.3 KB (1,280 bytes)

Scan mem.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.