home

memtest.efi

Memory Diagnostic

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Memory Diagnostic

Version:
6.0.6002.18005 (lh_sp2rtm.090410-1830)

MD5:
07f9a2a19dfd7050e6c21f27e2b5dfbc

SHA-1:
60e315bce5911a3868aacf1cd467816b57328979

SHA-256:
d4c4d23e4390aa07c01a1eacdd57f18b41400d64a916007cc36b2e40ea0a36a4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 8:47:51 PM UTC  (today)

File size:
470.5 KB (481,768 bytes)

Product version:
6.0.6002.18005

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
memdiag.exe

Language:
English (United States)

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/12/2008 5:12:30 PM

Valid to:
3/12/2010 5:22:30 PM

Subject:
CN=Microsoft Windows, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101E1A1000000000008

File PE Metadata
Compilation timestamp:
4/11/2009 12:53:33 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:

Linker version:
8.0

CTPH (ssdeep):
12288:c2Y3tnidXk8mPVkzwBTo/m0JeVcdqn6m6MFJ:cLidXkftSUH0Jee+6m6q

Entry address:
0x193C

Entry point:
48, 8B, C4, 48, 89, 58, 18, 55, 56, 57, 48, 81, EC, 90, 00, 00, 00, 8B, 71, 34, 33, ED, 48, 8B, F9, 48, 03, F1, 48, 8D, 50, 98, 48, 8D, 48, C0, 44, 8D, 45, 28, 89, 2D, 1E, FC, 16, 00, C7, 40, 98, 14, 00, 00, 00, C7, 06, 01, 00, 00, 00, C7, 40, 9C, 01, 00, 00, 00, C7, 40, A0, 00, 04, 00, 00, C7, 40, A4, 00, 00, 20, 00, 89, 68, A8, 48, 89, 68, B0, 89, 68, B8, E8, 15, 9B, 04, 00, 8B, 5C, 24, 68, F6, C3, 02, 89, 6C, 24, 6C, C7, 44, 24, 70, 10, 00, 00, 00, C7, 44, 24, 74, 00, 00, 01, 00, 48, 8D, 54, 24, 68, 0F...
 
[+]

Entropy:
6.4294

Code size:
327.5 KB (335,360 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.