home

winpmem_i386_1.6.1.sys

Michael Cohen

Publisher:
Michael Cohen  (signed and verified)

MD5:
7de8bbcbb44047e2bec0c08dc2b59ce1

SHA-1:
412ec6862e6e18838ff42a3fa9a21fb820f4a137

SHA-256:
3a2f12f9c4ef7bafc825af0eaedad16a4038925f8f0fa60ae40bfb35d4fd18a2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/27/2026 9:34:41 PM UTC  (today)

File size:
41.6 KB (42,640 bytes)

File type:
Driver (Win32 SYS)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\grr-0.3.0-7-docker\binaries\winpmem_i386_1.6.1.sys

Digital Signature
Signed by:
Michael Cohen

Authority:
DigiCert Inc

Valid from:
11/28/2013 1:00:00 AM

Valid to:
9/4/2014 2:00:00 PM

Subject:
CN=Michael Cohen, O=Michael Cohen, L=Horgen, S=Switzerland, C=CH

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0352C7AE79A03826F4DE8B0C9669C9E4

File PE Metadata
Compilation timestamp:
8/28/2014 2:24:52 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

Entry address:
0x7D3E

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, 72, 8D, FF, FF, CC, CC, 94, 7D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 2E, 80, 00, 00, 08, 30, 00, 00, 8C, 7D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 50, 80, 00, 00, 00, 30, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3C, 80, 00, 00, 00, 00, 00, 00, 92, 7E, 00, 00, AA, 7E, 00, 00, BE, 7E, 00, 00, C8, 7E, 00, 00, D2, 7E, 00, 00, E8, 7E, 00, 00, F8, 7E, 00, 00, 04, 7F, 00, 00, 1C, 7F, 00, 00, 28, 7F, 00, 00, 40, 7F...
 
[+]

Code size:
17.4 KB (17,792 bytes)

Scan winpmem_i386_1.6.1.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.