| filename | PE.0xb58577972080.4388.0xf80268803000.dmp | |
|---|---|---|
| size | 10944512 (0xa70000) | |
| md5 | a3b3ab38d48048ff6838ddc18e342bab | |
| type | PE32+ executable (native) x86-64, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | scan pending | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x100 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 262 | 26213 | 9 |
| 257 | 26213 | 14 |
| 1 | 0 | 97 |
| 0 | 0 | 129 |
| 147 | 30729 | 25 |
| 269 | 26213 | 1271 |
| 261 | 26213 | 27 |
| 260 | 26213 | 124 |
| 259 | 26213 | 69 |
| 256 | 26213 | 1 |
| 255 | 26213 | 1 |
| 258 | 26213 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
| module_name | hint | ord | function_name |
|---|---|---|---|
| ext-ms-win-ntos-werkernel-l1-1-0.dll | 3 | WerLiveKernelInitSystem | |
| ext-ms-win-ntos-werkernel-l1-1-0.dll | 9223363301468262416 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 57 | TmPrePrepareEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 56 | TmPrePrepareComplete | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 55 | TmIsTransactionActive | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 54 | TmIsKTMCommitCoordinator | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 53 | TmInitializeTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 50 | TmGetTransactionId | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 49 | TmFreezeTransactions | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 48 | TmEndPropagationRequest | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 47 | TmEnableCallbacks | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 46 | TmDereferenceEnlistmentKey | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 45 | TmCurrentTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 44 | TmCreateEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 43 | TmCommitTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 42 | TmCommitEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 41 | TmCommitComplete | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 40 | TmCancelPropagationRequest | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 39 | NtThawTransactions | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 36 | NtSetInformationTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 35 | NtSetInformationResourceManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 34 | NtSetInformationEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 32 | NtRollbackTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 31 | NtRollbackEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 30 | NtRollbackComplete | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 27 | NtRecoverTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 26 | NtRecoverResourceManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 25 | NtRecoverEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 63 | TmRecoverEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 52 | TmInitSystemPhase2 | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 51 | TmInitSystem | |
| ext-ms-win-ntos-tm-l1-1-0.dll | NtCommitComplete | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 1 | NtCommitEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 58 | TmPrepareComplete | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 3 | NtCreateEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 64 | TmRecoverResourceManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 65 | TmRecoverTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 66 | TmReferenceEnlistmentKey | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 67 | TmRenameTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 68 | TmRequestOutcomeEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 69 | TmRollbackComplete | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 70 | TmRollbackEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 71 | TmRollbackTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 72 | TmSetCurrentTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 17 | NtPrepareEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 74 | TmSinglePhaseReject | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 75 | TmThawTransactions | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 28 | NtRegisterProtocolAddressInformation | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 29 | NtRenameTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 59 | TmPrepareEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 4 | NtCreateResourceManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 5 | NtCreateTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 37 | NtSetInformationTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 38 | NtSinglePhaseReject | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 6 | NtCreateTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 7 | NtEnumerateTransactionObject | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 8 | NtFreezeTransactions | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 9 | NtGetNotificationResourceManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 10 | NtOpenEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 11 | NtOpenResourceManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 33 | NtRollforwardTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 73 | TmShutdownSystem | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 12 | NtOpenTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 13 | NtOpenTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 14 | NtPrePrepareComplete | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 15 | NtPrePrepareEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 60 | TmPropagationComplete | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 61 | TmPropagationFailed | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 2 | NtCommitTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 62 | TmReadOnlyEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 24 | NtReadOnlyEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 23 | NtQueryInformationTransactionManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 22 | NtQueryInformationTransaction | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 21 | NtQueryInformationResourceManager | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 20 | NtQueryInformationEnlistment | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 19 | NtPropagationFailed | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 18 | NtPropagationComplete | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 16 | NtPrepareComplete | |
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468866784 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468866672 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468876160 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468876064 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468900720 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468875392 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468874736 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468923280 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468885248 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468866528 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468844048 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468896688 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468873936 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468865952 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468865808 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468923248 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468917680 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468916880 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468900064 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468895712 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468916720 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468895504 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468895296 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468920848 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468899936 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468895168 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468867728 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468848192 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468938368 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468891824 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468892032 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468867072 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468892240 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468886288 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468848848 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468868272 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468901696 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468868448 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468868960 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468869152 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468876208 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468876720 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468894016 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468869728 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468876784 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468922320 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468920976 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468867184 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468897184 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468912064 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468921680 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468896480 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468917792 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468913296 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468913968 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468898224 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468892672 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468898624 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468921472 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468805680 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468914208 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468918560 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468893392 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468893600 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468923424 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468923520 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468911904 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468867520 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468894960 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468919440 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468914928 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468899264 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468894224 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468922144 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468921856 | ||
| ext-ms-win-ntos-tm-l1-1-0.dll | 9223363301468893808 | ||
| HAL.dll | 57 | HalReturnToFirmware | |
| HAL.dll | 32 | HalGetProcessorIdByNtNumber | |
| HAL.dll | 31 | HalGetMessageRoutingInfo | |
| HAL.dll | 33 | HalGetVectorInput | |
| HAL.dll | 72 | HalTranslateBusAddress | |
| HAL.dll | 45 | HalQueryEnvironmentVariableInfoEx | |
| HAL.dll | 68 | HalStartNextProcessor | |
| HAL.dll | 64 | HalSetEnvironmentVariableEx | |
| HAL.dll | 42 | HalPerformEndOfInterrupt | |
| HAL.dll | 84 | KeStallExecutionProcessor | |
| HAL.dll | 25 | HalGetBusDataByOffset | |
| HAL.dll | 46 | HalQueryMaximumProcessorCount | |
| HAL.dll | 81 | KdHvComPortInUse | |
| HAL.dll | 50 | HalRegisterErrataCallbacks | |
| HAL.dll | HalAcpiGetTableEx | ||
| HAL.dll | 36 | HalInitSystem | |
| HAL.dll | 61 | HalSetBusDataByOffset | |
| HAL.dll | 49 | HalRegisterDynamicProcessor | |
| HAL.dll | 67 | HalStartDynamicProcessor | |
| HAL.dll | 40 | HalIsHyperThreadingEnabled | |
| HAL.dll | 35 | HalHandleNMI | |
| HAL.dll | 34 | HalHandleMcheck | |
| HAL.dll | 19 | HalEnumerateProcessors | |
| HAL.dll | 52 | HalRequestClockInterrupt | |
| HAL.dll | 10 | HalCalibratePerformanceCounter | |
| HAL.dll | 13 | HalDisableInterrupt | |
| HAL.dll | 27 | HalGetEnvironmentVariableEx | |
| HAL.dll | 28 | HalGetInterruptTargetInformation | |
| HAL.dll | 37 | HalInitializeBios | |
| HAL.dll | 66 | HalSetRealTimeClock | |
| HAL.dll | 51 | HalReportResourceUsage | |
| HAL.dll | 3 | HalAllProcessorsStarted | |
| HAL.dll | 47 | HalQueryRealTimeClock | |
| HAL.dll | 83 | KeQueryPerformanceCounter | |
| HAL.dll | 17 | HalEnableInterrupt | |
| HAL.dll | 54 | HalRequestIpi | |
| HAL.dll | 69 | HalStartProfileInterrupt | |
| HAL.dll | 70 | HalStopProfileInterrupt | |
| HAL.dll | 39 | HalInitializeProcessor | |
| HAL.dll | 59 | HalSendSoftwareInterrupt | |
| HAL.dll | 58 | HalSendNMI | |
| HAL.dll | 55 | HalRequestIpiSpecifyVector | |
| HAL.dll | 56 | HalRequestSoftwareInterrupt | |
| HAL.dll | 82 | KeFlushWriteBuffer | |
| HAL.dll | 43 | HalProcessorIdle | |
| HAL.dll | 30 | HalGetMemoryCachingRequirements | |
| HAL.dll | 6 | HalAllocateCrashDumpRegisters | |
| HAL.dll | 38 | HalInitializeOnResume | |
| HAL.dll | 53 | HalRequestDeferredRecoveryServiceInterrupt | |
| HAL.dll | 63 | HalSetEnvironmentVariable | |
| HAL.dll | 26 | HalGetEnvironmentVariable | |
| HAL.dll | 9223363251116066848 | ||
| HAL.dll | 9223363251115906832 | ||
| HAL.dll | 9223363251115906384 | ||
| HAL.dll | 9223363251115965696 | ||
| HAL.dll | 9223363251115911376 | ||
| HAL.dll | 9223363251116048416 | ||
| HAL.dll | 9223363251115893024 | ||
| HAL.dll | 9223363251116048864 | ||
| HAL.dll | 9223363251115879120 | ||
| HAL.dll | 9223363251115873344 | ||
| HAL.dll | 9223363251115899744 | ||
| HAL.dll | 9223363251115896608 | ||
| HAL.dll | 9223363251116312672 | ||
| HAL.dll | 9223363251116470416 | ||
| HAL.dll | 9223363251115965568 | ||
| HAL.dll | 9223363251116409232 | ||
| HAL.dll | 9223363251115899456 | ||
| HAL.dll | 9223363251116048176 | ||
| HAL.dll | 9223363251116059280 | ||
| HAL.dll | 9223363251115965792 | ||
| HAL.dll | 9223363251116155504 | ||
| HAL.dll | 9223363251116154368 | ||
| HAL.dll | 9223363251115963184 | ||
| HAL.dll | 9223363251115876240 | ||
| HAL.dll | 9223363251115890496 | ||
| HAL.dll | 9223363251115900880 | ||
| HAL.dll | 9223363251115919216 | ||
| HAL.dll | 9223363251115959984 | ||
| HAL.dll | 9223363251115955648 | ||
| HAL.dll | 9223363251116070368 | ||
| HAL.dll | 9223363251116467232 | ||
| HAL.dll | 9223363251116467184 | ||
| HAL.dll | 9223363251115909984 | ||
| HAL.dll | 9223363251115873744 | ||
| HAL.dll | 9223363251115901136 | ||
| HAL.dll | 9223363251115877840 | ||
| HAL.dll | 9223363251116055072 | ||
| HAL.dll | 9223363251116055120 | ||
| HAL.dll | 9223363251115957824 | ||
| HAL.dll | 9223363251115874464 | ||
| HAL.dll | 9223363251116060848 | ||
| HAL.dll | 9223363251115880032 | ||
| HAL.dll | 9223363251115877600 | ||
| HAL.dll | 9223363251115886224 | ||
| HAL.dll | 9223363251115973040 | ||
| HAL.dll | 9223363251115909776 | ||
| HAL.dll | 9223363251116015152 | ||
| HAL.dll | 9223363251115892720 | ||
| HAL.dll | 9223363251116060800 | ||
| HAL.dll | 9223363251116048624 | ||
| HAL.dll | 9223363251116048256 | ||
| PSHED.dll | 8 | PshedFreeMemory | |
| PSHED.dll | 17 | PshedReadErrorRecord | |
| PSHED.dll | 4 | PshedClearErrorRecord | |
| PSHED.dll | 10 | PshedGetBootErrorPacket | |
| PSHED.dll | PshedAllocateMemory | ||
| PSHED.dll | 15 | PshedIsSystemWheaEnabled | |
| PSHED.dll | 13 | PshedInitialize | |
| PSHED.dll | 9 | PshedGetAllErrorSources | |
| PSHED.dll | 2 | PshedAttemptErrorRecovery | |
| PSHED.dll | 22 | PshedWriteErrorRecord | |
| PSHED.dll | 3 | PshedBugCheckSystem | |
| PSHED.dll | 7 | PshedFinalizeErrorRecord | |
| PSHED.dll | 1 | PshedArePluginsPresent | |
| PSHED.dll | 6 | PshedEnableErrorSource | |
| PSHED.dll | 5 | PshedDisableErrorSource | |
| PSHED.dll | 12 | PshedGetInjectionCapabilities | |
| PSHED.dll | 14 | PshedInjectError | |
| PSHED.dll | 20 | PshedSetErrorSourceInfo | |
| PSHED.dll | 9223363301469042000 | ||
| PSHED.dll | 9223363301469000304 | ||
| PSHED.dll | 9223363301469000608 | ||
| PSHED.dll | 9223363301469002720 | ||
| PSHED.dll | 9223363301469041952 | ||
| PSHED.dll | 9223363301469003360 | ||
| PSHED.dll | 9223363301469054128 | ||
| PSHED.dll | 9223363301469040656 | ||
| PSHED.dll | 9223363301469000736 | ||
| PSHED.dll | 9223363301468999904 | ||
| PSHED.dll | 9223363301469000800 | ||
| PSHED.dll | 9223363301469000672 | ||
| PSHED.dll | 9223363301469001776 | ||
| PSHED.dll | 9223363301469001040 | ||
| PSHED.dll | 9223363301469001104 | ||
| PSHED.dll | 9223363301469001200 | ||
| PSHED.dll | 9223363301469001408 | ||
| PSHED.dll | 9223363301469000944 | ||
| BOOTVID.dll | 11 | VidSolidColorFill | |
| BOOTVID.dll | 8 | VidScreenToBufferBlt | |
| BOOTVID.dll | VidBitBlt | ||
| BOOTVID.dll | 7 | VidResetDisplay | |
| BOOTVID.dll | 1 | VidBitBltEx | |
| BOOTVID.dll | 4 | VidDisplayString | |
| BOOTVID.dll | 6 | VidInitialize | |
| BOOTVID.dll | 9 | VidSetScrollRegion | |
| BOOTVID.dll | 10 | VidSetTextColor | |
| BOOTVID.dll | 3 | VidCleanUp | |
| BOOTVID.dll | 2 | VidBufferToScreenBlt | |
| BOOTVID.dll | 9223363301469132956 | ||
| BOOTVID.dll | 9223363301469136688 | ||
| BOOTVID.dll | 9223363301469135900 | ||
| BOOTVID.dll | 9223363301469131272 | ||
| BOOTVID.dll | 9223363301469136220 | ||
| BOOTVID.dll | 9223363301469133596 | ||
| BOOTVID.dll | 9223363301469130760 | ||
| BOOTVID.dll | 9223363301469137232 | ||
| BOOTVID.dll | 9223363301469133576 | ||
| BOOTVID.dll | 9223363301469137280 | ||
| BOOTVID.dll | 9223363301469137156 | ||
| ext-ms-win-ntos-clipsp-l1-1-0.dll | ClipSpInitialize | ||
| ext-ms-win-ntos-clipsp-l1-1-0.dll | 1 | ClipSpUninitialize | |
| ext-ms-win-ntos-clipsp-l1-1-0.dll | 9223363301470457680 | ||
| ext-ms-win-ntos-clipsp-l1-1-0.dll | 9223363301470469424 | ||
| kdcom.dll | 1 | KdPower | |
| kdcom.dll | 4 | KdSetHiberRange | |
| kdcom.dll | 3 | KdSendPacket | |
| kdcom.dll | KdInitialize | ||
| kdcom.dll | 2 | KdReceivePacket | |
| kdcom.dll | 9223363251117494400 | ||
| kdcom.dll | 9223363251117494432 | ||
| kdcom.dll | 9223363251117494368 | ||
| kdcom.dll | 9223363251117494304 | ||
| kdcom.dll | 9223363251117494384 | ||
| ext-ms-win-ntos-kcminitcfg-l1-1-0.dll | CmCompleteInitMachineConfig | ||
| ext-ms-win-ntos-kcminitcfg-l1-1-0.dll | 1 | CmSetInitMachineConfig | |
| ext-ms-win-ntos-kcminitcfg-l1-1-0.dll | 9223363301470859312 | ||
| ext-ms-win-ntos-kcminitcfg-l1-1-0.dll | 9223363301470867472 | ||
| ext-ms-win-ntos-ksr-l1-1-2.dll | 19 | KsrQueryMetadata | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | 4 | KsrFreePersistedMemory | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | 8 | KsrInitPageDatabase | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | 17 | KsrPersistMemoryWithMetadata | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | 10 | KsrMdlToMemoryRuns | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | 6 | KsrGetFirmwareInformation | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | 9 | KsrInitSystem | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | 1 | KsrCleanupPageDatabase | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | KsrClaimPersistedMemory | ||
| ext-ms-win-ntos-ksr-l1-1-2.dll | 5 | KsrFreePersistedMemoryBlock | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | 3 | KsrEnumeratePersistedMemory | |
| ext-ms-win-ntos-ksr-l1-1-2.dll | 9223363251106202464 | ||
| ext-ms-win-ntos-ksr-l1-1-2.dll | 9223363251105209008 | ||
| ext-ms-win-ntos-trace-l1-1-0.dll | TraceInitSystem | ||
| ext-ms-win-ntos-trace-l1-1-0.dll | 9223363251106202464 | ||
| ext-ms-win-ntos-ksecurity-l1-1-1.dll | QueryUpdateFileEaAllowedExt | ||
| ext-ms-win-ntos-ksecurity-l1-1-1.dll | 9223363251106202464 | ||
| ext-ms-win-ntos-werkernel-l1-1-1.dll | 5 | WerLiveKernelSubmitReport | |
| ext-ms-win-ntos-werkernel-l1-1-1.dll | 4 | WerLiveKernelOpenDumpFile | |
| ext-ms-win-ntos-werkernel-l1-1-1.dll | 1 | WerLiveKernelCloseHandle | |
| ext-ms-win-ntos-werkernel-l1-1-1.dll | 2 | WerLiveKernelCreateReport | |
| ext-ms-win-ntos-werkernel-l1-1-1.dll | WerLiveKernelCancelReport | ||
| ext-ms-win-ntos-werkernel-l1-1-1.dll | 9223363301468244608 | ||
| ext-ms-win-ntos-werkernel-l1-1-1.dll | 9223363301468244368 | ||
| ext-ms-win-ntos-werkernel-l1-1-1.dll | 9223363301468243440 | ||
| ext-ms-win-ntos-werkernel-l1-1-1.dll | 9223363301468243632 | ||
| ext-ms-win-ntos-werkernel-l1-1-1.dll | 9223363301468243248 | ||
| ext-ms-win-ntos-ksigningpolicy-l1-1-0.dll | 2 | SeQuerySigningPolicyExt | |
| ext-ms-win-ntos-ksigningpolicy-l1-1-0.dll | 9223363251106202464 | ||
| ext-ms-win-ntos-ucode-l1-1-0.dll | ExpMicrocodeInformationLoad | ||
| ext-ms-win-ntos-ucode-l1-1-0.dll | 1 | ExpMicrocodeInformationUnload | |
| ext-ms-win-ntos-ucode-l1-1-0.dll | 2 | ExpMicrocodeInitialization | |
| ext-ms-win-ntos-ucode-l1-1-0.dll | 9223363301470920736 | ||
| ext-ms-win-ntos-ucode-l1-1-0.dll | 9223363301470920992 | ||
| ext-ms-win-ntos-ucode-l1-1-0.dll | 9223363301470928928 | ||
| ext-ms-win-ntos-stateseparation-l1-1-0.dll | 1 | ExpInitializeStateSeparationPhase1 | |
| ext-ms-win-ntos-stateseparation-l1-1-0.dll | ExpInitializeStateSeparationPhase0 | ||
| ext-ms-win-ntos-stateseparation-l1-1-0.dll | 2 | ExpInitializeStateSeparationPhase2 | |
| ext-ms-win-ntos-stateseparation-l1-1-0.dll | 9223363251106202464 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 35 | ClfsMgmtInstallPolicy | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 37 | ClfsMgmtRegisterManagedClient | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 7 | ClfsCreateLogFile | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 33 | ClfsMgmtDeregisterManagedClient | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 20 | ClfsGetLogFileInformation | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 48 | ClfsReadRestartArea | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 27 | ClfsLsnEqual | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 45 | ClfsReadLogRecord | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 46 | ClfsReadNextLogRecord | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 57 | ClfsTerminateReadLog | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 58 | ClfsWriteRestartArea | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 10 | ClfsDeleteLogByPointer | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 12 | ClfsDeleteMarshallingArea | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 51 | ClfsReserveAndAppendLog | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 29 | ClfsLsnInvalid | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 16 | ClfsFlushToLsn | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 24 | ClfsLsnContainer | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 30 | ClfsLsnLess | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 8 | ClfsCreateMarshallingArea | |
| ext-ms-win-fs-clfs-l1-1-0.dll | ClfsAddLogContainer | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 26 | ClfsLsnDifference | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 6 | ClfsCloseLogFileObject | |
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468541232 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468589984 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468542272 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468600944 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468545456 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468523888 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468371296 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468530288 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468528624 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468527088 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468516048 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468508912 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468520144 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468551888 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468384112 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468521024 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468386832 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468362880 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468527568 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468599984 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468375840 | ||
| ext-ms-win-fs-clfs-l1-1-0.dll | 9223363301468598880 | ||
| CI.dll | CiInitialize | ||
| CI.dll | 9223363301471224112 | ||
| msrpc.sys | 15 | MesEncodeIncrementalHandleCreate | |
| msrpc.sys | 17 | MesIncrementalHandleReset | |
| msrpc.sys | 45 | NdrMesTypeDecode3 | |
| msrpc.sys | 48 | NdrMesTypeEncode3 | |
| msrpc.sys | 64 | RpcExceptionFilter | |
| msrpc.sys | 11 | MesDecodeBufferHandleCreate | |
| msrpc.sys | 16 | MesHandleFree | |
| msrpc.sys | 9223363301473962944 | ||
| msrpc.sys | 9223363301473963328 | ||
| msrpc.sys | 9223363301473923312 | ||
| msrpc.sys | 9223363301473894304 | ||
| msrpc.sys | 9223363301473970912 | ||
| msrpc.sys | 9223363301473963648 | ||
| msrpc.sys | 9223363301473968480 | ||
| cng.sys | 16 | BCryptExportKey | |
| cng.sys | 9223363301487024480 |
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
Cannot call to_der on
undefined method `type' for nil:NilClass
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[!] PEdump::WIN_CERTIFICATE: too big length 2248113816
[!] PEdump::WIN_CERTIFICATE: too big length 539255939
[!] PEdump::WIN_CERTIFICATE: too big length 4294887244
[!] PEdump::WIN_CERTIFICATE: too big length 2248113816
[!] PEdump::WIN_CERTIFICATE: too big length 539255939
[!] PEdump::WIN_CERTIFICATE: too big length 4294887244
[!] PEdump::WIN_CERTIFICATE: too big length 2248113816
[!] PEdump::WIN_CERTIFICATE: too big length 539255939
[!] PEdump::WIN_CERTIFICATE: too big length 4294887244
[!] PEdump::WIN_CERTIFICATE: too big length 2248113816
[!] PEdump::WIN_CERTIFICATE: too big length 539255939
[!] PEdump::WIN_CERTIFICATE: too big length 4294887244
[!] PEdump::WIN_CERTIFICATE: too big length 2248113816
[!] PEdump::WIN_CERTIFICATE: too big length 539255939
[!] PEdump::WIN_CERTIFICATE: too big length 4294887244
[!] PEdump::WIN_CERTIFICATE: too big length 2248113816
[!] PEdump::WIN_CERTIFICATE: too big length 539255939
[!] PEdump::WIN_CERTIFICATE: too big length 4294887244
offset:( 0x )