PSHED.DLL

  • File Path: C:\Windows\SysWOW64\PSHED.DLL
  • Description: Platform Specific Hardware Error Driver

Hashes

Type Hash
MD5 A5F9427E2FDF505CA22511B58B4D1651
SHA1 75AE451274356C0F074FCB510ABC9FC45DA46603
SHA256 789A7EC52BABA2831D81DE4C7B420E21AC458948D627248D1C2617E1102ED213
SHA384 604AA02BDDA9A66316456483AC88ACEDC5C0EE3DC716C7C066DD94933E252AA7460D82864214EE62537DA66DFF2B34F3
SHA512 0F79FB3649AB71DBE559B376AD9788C638A6308E6351758D7C6E85B6D7F89F8CFA32F4AF329685E6BD36E33BD8CC2473B94730DC46B2335A387575ED7C060B4F
SSDEEP 1536:4yZCoii0zchMbOZBc6+sXKukPQ+psI0LyqP:4yZCoiBcVLc6+sXKukPQ+psI0Lyq
IMP 84313DA422CA002473389CD857280837
PESHA1 43002DDC42DAA0F50CC39CC48013B3A1D6BFEE99
PE256 A3AACB22776F4ECB8FE394E296F7DD0147C1B9762BB6F29F4960D3087012BDBE

DLL Exports:

Function Name Ordinal Type
PshedInjectError 20 Exported Function
PshedIsSystemWheaEnabled 21 Exported Function
PshedMarkHiberPhase 22 Exported Function
PshedInitProc 18 Exported Function
PshedInitAvailable 16 Exported Function
PshedInitGlobal 17 Exported Function
PshedInitialize 19 Exported Function
PshedReadErrorRecord 23 Exported Function
PshedSynchronizeExecution 28 Exported Function
PshedUnregisterPlugin 29 Exported Function
PshedWriteErrorRecord 30 Exported Function
PshedSetHalEnlightenments 27 Exported Function
PshedRegisterPlugin 24 Exported Function
PshedRetrieveErrorInfo 25 Exported Function
PshedSetErrorSourceInfo 26 Exported Function
PshedClearErrorRecord 5 Exported Function
PshedDisableErrorSource 6 Exported Function
PshedDoPfa 7 Exported Function
PshedBugCheckSystem 4 Exported Function
PshedAllocateMemory 1 Exported Function
PshedArePluginsPresent 2 Exported Function
PshedAttemptErrorRecovery 3 Exported Function
PshedEnableErrorSource 8 Exported Function
PshedGetErrorSourceInfo 13 Exported Function
PshedGetHalEnlightenments 14 Exported Function
PshedGetInjectionCapabilities 15 Exported Function
PshedGetBootErrorPacket 12 Exported Function
PshedFinalizeErrorRecord 9 Exported Function
PshedFreeMemory 10 Exported Function
PshedGetAllErrorSources 11 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: pshed.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/789a7ec52baba2831d81de4c7b420e21ac458948d627248d1c2617e1102ed213/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\PSHED.DLL 63

MIT License. Copyright (c) 2020-2021 Strontic.