» vmmap.exe
Overview
Analysis
File Details

vmmap.exe

Vmmap

VS Bld Lab

File name:

vmmap.exe

Publisher:

Sysinternals - www.sysinternals.com (signed by VS Bld Lab)

Product:

Vmmap

Description:

Vmmap - process memory analyzer

Version:

3.11

MD5:

f0f045d3d3254ae6ba240d73fee98113

SHA-1:

8802ed505f9984297120510111a466cfcead7141

SHA-256:

62e41d338f2c45604e7541a2ca842286da9f6474a0934960c334c0531a5effd1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 11:32:17 AM UTC (today)

File size:

415.4 KB (425,336 bytes)

Product version:

3.11

Original file name:

Vmmap

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

VS Bld Lab

Authority:

MSIT Test CodeSign CA 2

Valid from:

3/6/2012 5:01:20 PM

Valid to:

3/6/2013 5:01:20 PM

Subject:

CN=VS Bld Lab

Issuer:

CN=MSIT Test CodeSign CA 2, DC=redmond, DC=corp, DC=microsoft, DC=com

Serial number:

2A1C8D4E00020020BBB1

File PE Metadata

Compilation timestamp:

6/13/2012 1:55:59 PM

OS version:

6.2

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

6144:+wzR56EtznC/1zLzHt4NdEcP0BbDbh68VEfm/JSn3TYtSSCvVzVxh:1r6EtY1z/N4NdE2ObDbhtfwTxzVxh

Entry address:

0x2ABCD

Entry point:

E9, 00, 48, EB, 46, 0A, F0, 0B, F8, FF, F7, 6B, FF, BD, E8, 00, 88, 00, 00, 2D, E9, F0, 4F, 0D, F2, 1C, 0B, 87, B0, 1F, 46, FD, 69, 3C, 68, 8E, 46, 2B, 68, 03, 91, 79, 68, 81, 46, B4, EB, 01, 0A, 13, F0, 00, 4F, 02, 91, 02, D0, 33, F0, 00, 44, 65, 18, 97, F8, 28, 40, 0C, B1, AA, F1, 02, 0A, D9, F8, 04, 40, 14, F0, 66, 0F, 51, D1, D7, F8, 24, 80, CD, F8, 10, 90, 05, 92, 2B, 68, 98, 45, 80, F0, 8C, 80, 4D, 4C, 05, EB, 08, 16, 73, 68, 9A, 45, 39, D3, B3, 68, 9A, 45, 36, D2, 33, 69, A3, B3, F2, 68, 01, 2A, 08... 
[+]

Entropy:

6.6777

Packer / compiler:

Xtreme-Protector v1.05

Code size:

234 KB (239,616 bytes)

Scan vmmap.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.